E-mail phishers targeting Xbox Live accounts (joystiq.com)

[7th lutz]

http://www.joystiq.com/2007/09/11/e-mail-phishers-targeting-xbox-live-accounts/

Stealing your bank account or credit card information is one thing, but now e-mail phishers are going after something truly important: Your Xbox Live account. Xbox.com forum-goer Whagi reports on an e-mail he received, purportedly from Xbox Support, announcing new features on his Xbox Live account. The e-mail links to a supposed Microsoft passport login page that's actually a phishing site designed to capture your login information.

The problem goes deeper than your Xbox -- if you use your Passport account for other Microsoft services, the phishers could have access to a lot of sensitive information. The same e-mail has reportedly been received by other users in the U.S. and U.K.

It probably goes without saying, but if you get a similar e-mail, delete it immediately. If you accidentally use the link, change your password immediately. And don't trust random e-mails to notify you about new Xbox Live updates -- that's what we're here for, after all.

I posted this for all members that have Xbox live account would be informed of e-mail phishers wanting your personal information.

[7th lutz]

I found what e-mail looks like. Here it is:

Subject: Changes To Your Xbox Live Account

From: Xbox Support [support@passport.xbox.com]

Email body:

"Dear Xbox Live User,

We have made many changes to everyone’s Xbox Live account, and we would like you to check out the new features! You can check out the new features by click on the link below to login and check them out!

Please check out your new features to your Xbox Live account!

https://www.xbox.com/signin/"

[kaedesdisciple]

And it looks like every other phishing email people get every single day. Moral of the story is, ALWAYS log into your account in the normal fashion. Open your browser yourself, type in www dot whereverigottago dot com, log in using the normal mechanism and check it out yourself. Don't click links in emails, especially ones that say that you need to fix or verify something, or have some hot stock tips, or discount drugs, the list goes on and on...

Good looking out, though.

[meancode]

I *really* do not see how this is news. If people are dumb enough to not check the URL field in either their email client or web browser, then they need a lesson in living on the Internet in 2007.

And yes, good point, it looks like every other phishing email out there.