I have today seen two very convincing emails portraying to have come from Blizzard, one saying that I have now access to beta (yeah, right, already in!), and another saying that my Diablo installation needs to be redone before the release.
Problem was, both have come into an email address that has ONLY been given to Curse, hence this leads to the question, did Curse sell my data on even though I've opted out of all third party communications, or has Curse been hacked into?
So I have the same problem with phishing attempts to my email (which is curseclient@xxxxxxxxxxx) .. They first started coming in around the time I was playing Cataclysm, then stopped after I stopped playing for a handful of months.. I have since reformatted my machine, and thought "meh, let's see what pandas are about... I'll clearly need curse"... and suddenly, the phishing scams started again... to the same curseclient@xxxxxxxxxxx email...
I find it hard to believe that any spyware infections on my machine would single out this EXACT email address (and ONLY this email address) which is ONLY used for curse client registration. I find it equally hard to believe that this only occurs when curse client is installed on my machine. So unless you're suggesting that your software in-and-of-itself is spyware, what is your explanation for this anomaly?
Phishing scams starting again and you starting to visit Curse/using Curse Client again could also just be a correlation instead of a causation, both being related to the release of MoP. So it doesn't have to be a new issue if those sending the phishing mails used a set of addresses expected/known to be in the context of WoW.
(still doesn't explain how the address was exposed in first place though...)
volunteer Curse moderator This posting is made of 100% recycled electrons.
raidekoptix, we've not had any sort of information leak that would have handed out your email address, and Curse would never sell your details. As Elkano has stated above, this is likely a correlation, not the cause. Additionally, be sure to thoroughly check your machine, to be safe.
One of the spam e-mails I received has 100+ addresses in the "To:" field. I beleive this is a list taken directly from the curse-gaming database as 5 of the addresses have custom "curse" aliases, like curse@ curse-gaming@ etc.
I am interested to know if all or some of these addresses are registered here at curse.com/curse-gaming.com
If a mod wants to PM me I can give you the pastebin for the e-mail (incl. headers)