These forums have been archived and are now read-only.

The new forums are live and can be found at https://forums.eveonline.com/

EVE General Discussion

 
  • Topic is locked indefinitely.
Previous page12
 

since when do we have account scamming?

First post
Author
driv4r
The Scope
Gallente Federation
#21 - 2011-10-08 20:46:43 UTC  |  Edited by: driv4r
I got exactly same fake email from same (EVE Online Support) email address!

EDIT: I got another one from the same address, so I will post a new thread about it soon.

EDIT2: Ok, I think I actually won't do it as exactly the same email as the 2nd scam one I received is already in the sticky thread 'Protect your account'. It's the last quoted email on the 2nd page.
Also, the email that is here on the first page (and that I also got) has also been posted there with a minor difference.

My question is how can they use the correct EVE Online support email address support@eveonline.com to send this stuff?? What?

"Stupid is as stupid does." - Forrest Gump

driv4r's YouTube channel including EVE vids

Scrapyard Bob
EVE University
Ivy League
#22 - 2011-10-09 14:45:50 UTC
driv4r wrote:

My question is how can they use the correct EVE Online support email address support@eveonline.com to send this stuff?? What?


Because that's the way the SMTP protocol works (or fails to work in the case of "joe jobs" and "forgery") - unless your mail server checks something like SPF, SenderID, DKIM to verify that the sending server's IP is allowed to say that they are XYZ. Without those checks, anyone can pretend to be anyone else in the sender fields (there's no central authority, nor should there be).

Note: eveonline.com does publish a SPF record, and it is set as "-all", so complain to your mail provider for not doing SPF tests and tagging failures as spam (or just blocking them at the ingress point).
Mr Kidd
Center for Advanced Studies
Gallente Federation
#23 - 2011-10-09 14:56:20 UTC
Scrapyard Bob wrote:
I'm still amazed that CCP doesn't yet offer some sort of Digipass keyfob system like Blizzard and Bioware are using.


What are you complaining about? CCP explicitly said they "were" going to offer them. What more do you want from CCP? Blood?

Don't ban me, bro!

Simetraz
State War Academy
Caldari State
#24 - 2011-10-09 15:00:09 UTC
Some basic security options.

First create a Email account for your EVE subscriptions with a reputable company (NOT GMAIL, YAHOO, etc)
Second update your profile(s) with the address.
Third don't give that email address out to anyone else.

Problem solved.
Now only CCP and the company who is hosting your email will know what it is.
You should never receive any of the emails the OP is talking about and if you do the list is rather short of who leaked it.


Rakshasa Taisab
Sane Industries Inc.
#25 - 2011-10-09 15:11:17 UTC
Simetraz wrote:
Some basic security options.

First create a Email account for your EVE subscriptions with a reputable company (NOT GMAIL, YAHOO, etc)
Second update your profile(s) with the address.
Third don't give that email address out to anyone else.

What is not reputable about GMAIL?

Never gotten a single eve scam mail and other spam goes through perhaps once or twice a month, despite my mail address being plastered all over the net.

Nyan

Mayasama Amaya
United Mining and Hauling Inc
The Initiative.
#26 - 2011-10-09 16:24:22 UTC
I have received the same email with the character transfer. This is not the mail service's fault. And in many cases not the user's fault either since he didn't break any rules in the EULA. The email addresses might have been obtained in the last attack that we all remember, when all the servers went offline for days to prevent data loss. Well it seems they did got something and it wasn't as CCP advertised that there were no customer information loss.

My point is that CCP should take direct, active measures against the phishing sites instead of doing almost nothing like telling us not to click the links. This is what we pay for, quality of service and uninterrupted experience.
Thanks.
Previous page12