[分享] 提防中伏 (E-Mail Phishing)

狂@車R

各位
先畀大家睇一幅圖
判斷下係咪Jagex send黎既email



其實，係一封冒得幾勁既e-mail...
============================
無玩差唔多一年, 竟然話我sell acc?! 荒謬!
不過, 跟佢條link入左去認證, 保障自己 (結果是除左衫畀人睇)

一入bank, 咦, GP 去晒邊? Runes 呢? Ores 呢?

上RS forum睇, 有MOD開左post, 亦都唔少人reply
而果個區(Account Security)入面既post, 都係新開既, 真相大白了...

狂@車R

呢個該死既email, 今日仲send左兩次黎
所以決定上forum再睇

topic: emails claiming i was reported



topic: Identifying E-Mail Phishing



補充:
我收到既email來自 noreply@runescape.com 及 noreply@jagex.com
但重點並非寄件人的地址
而是經查證後, email 來源並非如下

Received: from mta.chtah.net      
From: "RuneScape" news@email.runescape.com, , loyalty@email.runescape.com or noreply@jagex.com

我收到既email來源係

Received: from mail.volleymail.com
From: "unknown" (HELO vlm27259.net)

email 地址係可以偽造出黎, 重點係睇 email header information

ξ★斬逝°×

即係點,noreply@jagex.com係堅定流?

狂@車R

即係點,係堅定流?
ξ★斬逝°× 發表於 20-7-2011 23:41

check 多次之後,
兩封email分別來自 noreply@runescape.com 及 noreply@jagex.com
所以答唔到你邊個地址是真是假, 重點係睇email source header information
話唔定可以模仿?

狂@車R

根據#2 圖1 Mod Sadie 既回覆
事實上
Jagex 唔會因為帳戶資料或觸犯任何條例
而以個人電郵通知玩家
只有玩家要求, Jagex 才會send email
絕多情況只會在官網上既 Message Inbox 作出通知

呢個問題已經持續左成個幾月,
好多玩家亦都上當
希望大家小心
(有興趣可以去RS forum走一轉, 睇下Account Secutiry 區
I've been hijacked 個post 有幾多人reply就知)
我既損失比起其他人黎講, 只係小巫見大巫,
況且我都無乜點玩, 但只是感到好可惜

如果有唔明, 歡迎討論

Hk_Alexander

但你果封野..正正就係寫住....  "RuneScape" noreply@jagex.com ....

狂@車R

但你果封野..正正就係寫住....  "RuneScape" noreply@jagex.com ....
Hk_Alexander 發表於 21-7-2011 09:03

quote 自 Identifying Email Phishing

If you do receive an official looking e-mail from Jagex still be cautious,
there are ways to change the appearance of a sending address in the "From" field of an e-mail.
This process is called "spoofing" and may make an email look official.
There is a way to check the actual sending address of an email and this can be done by looking within the emails header information.        

其實寄件人地址係有得fake 出黎
上面我補充左有關 email header information 既資料 (#2)

天劍．雷伊

所有網上遊戲通常/極有可能唔會要求你入某某LINK問帳號/密碼，就算俾條LINK你改密碼(即係呢3個月唔改密碼好危險啊 要改密碼喇之類)都唔可入

一封EMAIL凡係叫你入去某某LINK打密碼都刪左佢...........
就算抬頭係官網網址...因為...
EMAIL都可以做手腳
Hacker係一群擅長用電腦GEI人 你唔會知道佢地點做出泥

james678

E個Email我都收到無數個, 當然知道係假...
但係想令自己安心D, 另外入runescape 官網 login 睇睇, 應該就唔會有事哇