Is this a phishing attempt?

Dist · 7 Apr 2012 at 23:43

I just received 2 emails about 5 min apart titled "Bioware Mythic - Password Change Request"

I'm hoping someone knows if this is a phishing attempt, or if it is a legit password change request why would someone bother trying it with my email address (which uses my own domain, so isn't as simple as a miss-typed gmail address or something). The password reset links/codes go to accounts.eamythic.com which a quick google shows as legit. But it is also odd that if it is legit then why doe it say if I did not authorize this, contact support department by e-mail at null (it's a mailto link but the address is just 'null').

This is either a phishing attempt that goes to legit site, or a password request by someone trying to use my email which in no way would get them access to my account (and the only account I can think that would be mythic related is my old US DAoC account), but if it is legit it has some **** links (such as a null address), and links to ea help which are of no help at all with account help.

Bioware Mythic

Password Change Request

Bioware Mythic received a request to change your EA Account password for [email protected] .
To continue changing the password for this account, click here.

If you did not authorize this, please contact the Support department by e-mail at null

You can also contact Support via help.ea.com. Click on “Talk to a Game Advisor” and follow the simple steps. If you are based in the US, this website allows you to leave your phone number for us to call you back.

This is an automated email from the Account Management site for Bioware Mythic.

Games Workshop, Warhammer, Warhammer Online, Age of Reckoning, and all associated marks, names, races, race insignia, characters, vehicles, locations, units, illustrations and images from the Warhammer world are either ®, ™ and/or © Games Workshop Ltd 2000-2011. Used under license by Electronic Arts Inc

d_brennen · 7 Apr 2012 at 23:47

Change your details, by visiting the official site of course, just to be sure

Dist · 8 Apr 2012 at 00:02

Well I tried to log in to my mythic account (it was never merged to an EA account, was too long ago when I played DAoC), and the account was locked out for 30 min (i guess someone tried to login). at which point I did a password reset from the offical site, made a new pass, and then linked it to my current EA account. Everything should be good.

This is one of the reasons I hate EA. Even though they are trying to localize everything to a single EA account, they are doing a god awful job at it with different things having to be managed through different websites, no/little account support, legit emails with links to null addresses.

I just don't get why someone would even try to request a password reset for my account, it's not like they would ever have access to my email account to even follow through with the reset.

dakaiez · 8 Apr 2012 at 00:30

You can normally tell when it is a phishing attempt as they ask you to click the link to change your details. If it is as above, it tells you to go to the official site and check as you found out it was legit.

Dist · 8 Apr 2012 at 00:38

v1bez said:
You can normally tell when it is a phishing attempt as they ask you to click the link to change your details. If it is as above, it tells you to go to the official site and check as you found out it was legit.

I wasn't entirely sure if the links were official links, as things have changed a lot since the last time I played DAoC. Searching Google seems to suggest the websites are legit though, but one reason for my hesitation is that when I tried to google the email, either the title or parts of it, I got nothing related to it. Usually I would have expected someone, somewhere, to have mentioned the password recovery email.

moogle · 8 Apr 2012 at 02:18

It's not a phishing attempt but someone trying to login to an account of yours on that site. Perhaps they thought they'd get a security question or something to try and bypass sending a password reset to your email.

MeMeMeMe · 8 Apr 2012 at 23:34

Or it could be an innocent mistake. Someone is trying to remember their own username, but guesses yours instead, and clicks the "send me a password reset" mail.

moogle · 8 Apr 2012 at 23:38

MeMeMeMe said:
Or it could be an innocent mistake. Someone is trying to remember their own username, but guesses yours instead, and clicks the "send me a password reset" mail.

You can only submit an email for forget your password. I'm sure someone was trying to see the level of security

Or their email is similar to the OP's

dakaiez · 9 Apr 2012 at 00:21

Dist said:
I wasn't entirely sure if the links were official links, as things have changed a lot since the last time I played DAoC. Searching Google seems to suggest the websites are legit though, but one reason for my hesitation is that when I tried to google the email, either the title or parts of it, I got nothing related to it. Usually I would have expected someone, somewhere, to have mentioned the password recovery email.

Yeah true, but if you do as you did and go to the official site without going through a link mentioned in the email you can quickly see.

Werewolf · 9 Apr 2012 at 00:43

MeMeMeMe said:
Or it could be an innocent mistake. Someone is trying to remember their own username, but guesses yours instead, and clicks the "send me a password reset" mail.

Given the state of the EA login system for things like UO/Warhammer I can quite believe that.

When they started moving people over to the new system, the idiots didn't think to mention that peoples old accounts were available via the new servers, but had things like _eur as a suffix (for warhammer online EU players), so you might try to login into the field that states "enter your EAMythic master account name" by entering "myusername", but because their system now has multiple different accounts that username could well be taken by someone else, whilst yours is now "myusername_eur".

I'm not really anti EA, I'm just anti EA's management, accountants and the programmers/web page designers, support page writers who don't seem to have a clue what games the account system is for, or that documenting major changes in how your regular players (who may be spending multiples of £120 a year direct) log in/pay you is a good idea, before you make the changes.

/mutters many rude things about EA.