Skip to main content

Runes of Magic Impersonates Scammer

I thought one of the cardinal rules of internet security is that legitimate companies never ever send out emails to their customers asking them for their passwords. Knowing this rule makes it easy to resist the daily flood of scam emails purportedly from financial institutions, gaming companies and other online services informing me that my account has been compromised and that I really really really need to "click this link" and enter my password to get it all sorted out.

So when I got not one but two separate emails purporting to come from Runes of Magic asking me to "click this link" and enter my password and warning of dire consequences if I didn't, my first reaction was "Scam, bin it".


It reads like a scam. It even has one of those uniquely identifiable html links that scammers are so fond of for tagging their victims. It looks a bit more professionally done than the usual scam email but html is cheap and all of those logos are easily grabbed from the respective websites. The only reason I gave this a second thought was because the link address "frogster-online.com" sounds vaguely legitimate.

I decided to investigate. Not by clicking the link but by using a web browser to go straight to Runes of Magic's home page http://www.runesofmagic.com/en/index.html . I was quite surprised to discover a news article about the password reset confirming that the email was genuine.

I understand that RoM have to use email to contact their customers. Email is the only way for them to contact inactive players. Nevertheless I believe the email they sent out was just wrong. Savvy internet users are likely to dismiss it as a scam while  gullible internet users are more likely to fall for the next scam because the RoM email turned out to be genuine. In fact they have just created the perfect opportunity for a scammer to copy the email in every detail but modify the link to point to an infected web page.


RoM should have sent out an email telling customers of the changes and asking them to visit the official RoM website for more details. If they must include a link include a plain un-adorned link to runesofmagic.com.

Comments

Tesh said…
Agreed. This really was a dumb move, though I like to think it's just ignorant. It's like the people in charge of this notification don't know anything about scammers.

I got one of these in my email box and deleted it reflexively. I didn't mark it as a phishing scam because I suspected it might be real, but neither did I trust enough to follow the link or really dig into it.

Popular posts from this blog

My First Gaming Mouse: Logitech G300

I bought a gaming mouse yesterday a Logitech G300, here my initial thoughts. What is a gaming mouse?  There are a wide variety of devices available classified as gaming mice but a few features  seem common: 1. Wired rather than wireless: Although some high end models are wireless wired connections are just better and faster than wireless so most gaming mice stick with wired. As a bonus wired mice don't need batteries so the mouse is lighter.  2. High response rate: 1 to 2ms response rate so the mouse immediately responds to input.  2. High DPI. Gaming mice invariable boast high DPI numbers from 2,000 DPI upwards. This makes the device very responsive to the smallest movements.   3. Adjustable DPI . High DPI improves responsiveness but reduces precision so gaming mice generally allow you to adjust the DPI down for precise work such as pulling off headshots in sniper mode. Generally the mouse allows dpi to be changed on the fly by pressing a button.  4. Extr

Portal 2 two screen coop on one PC.

I mentioned before that I intended to try Portal 2 in "unofficial split screen co-op mode. Well split screen on a small computer monitor is a recipe for a headache especially when the game defies gravity as much as portal. However a minor bit of extra fiddling allowed us to drive two seperate screens from one PC. The Steam forums describes a complicated method of doing this that I couldn't get working so this simpler method which worked for me might be of use to someone. 1. First I followed the instructions in this post to get split screen multi-player working: http://forums.steampowered.com/forums/showthread.php?t=1847904 A minor issue not mentioned is that you need to enable the console from the keyboard/mouse options menu I am using keyboard and one wired Xbox360 controller as suggested. Getting the controller to switch to channel 2 was tricky at first but as Chameleon8 mentions plugging it out and in again during loading works. The trick for me was to do the plug / p

Android Tip 3: Sharing a Folder between multiple users of an Android device

Android has allowed multiple user logins for quite a while now. This is can be very useful for tablets which are shared by family members. Normally Android erects strict Chinese walls between users preventing them from using each others apps and viewing each others files. This is a useful security feature and ensures your kids don't mess up your work spreadsheets when screwing around on the tablet and should also prevent them from buying €1,000 worth of Clash of Candy coins on your account. Sometimes however you really do want to share stuff with other users and this can prove surprisingly difficult. For example on a recent holiday I realised that I wanted to share a folder full of travel documents with my wife. Here are some ways to achieve this. 1. If you have guaranteed internet access  then you can create a shared folder on either Dropbox or Google drive. Either of these has the great advantage of being able to access the files on any device and the great disadvantage of bein