Megashiba price

Quote:

---

Originally Posted by Iscah

I would take a very close look at (but don't follow) the link that comes up when you hover over it, and compare it to the actual online store link.

---

store.finalfantasyxiv.com

/shrug

I got one too from the usual SE email. Not clicking any links on the off-chance, but I assume it's official and simply a typo.

If the OP clicked a phishing link, they probably wouldn't have their account right now.

Got that mail too. But the link goes to square-enix-games.com when i hover over it with the mouse cursor. But square-enix-games.com seems to be legit. :(


Cheers

Quote:

---

Originally Posted by Kranel_San

one-time password is great to have :)

---

It does nothing to protect phishing scams.
Not saying this email was one. But I am saying the OTP isn't the Hallowed Ground some people think it is.

Quote:

---

Originally Posted by Canadane

It does nothing to protect phishing scams.
Not saying this email was one. But I am saying the OTP isn't the Hallowed Ground some people think it is.

---

Go on. Explain more.

Quote:

---

Originally Posted by Kranel_San

Go on. Explain more.

---

If it were a phishing site, it'd ask you to log in with your username, password, and OTP.
All that it'd do after that is send that information to the scammers computer, and very likely automatically attempt a login since human intervention may be too slow.

It happens all the time. See those 300M gil raffle giveaway tells for example. That's the nature of phishing, the end result is you simply giving your information willingly (but probably unknowingly) to a scammer to log in. It should be obvious but anyone you GIVE your passwords to will have access to those accounts.

because when the phishing site asks you for the OTP there is still a window where the information is still valid after you've logged in. they have scripts that hammer you to take you offline and they log in while the OTP is still active that you entered and then go and change everything on you. that's how they work.

Quote:

---

Originally Posted by Canadane

If it were a phishing site, it'd ask you to log in with your username, password, and OTP.
All that it'd do after that is send that information to the scammers computer, and very likely automatically attempt a login since human intervention may be too slow.

It happens all the time. See those 300M gil raffle giveaway tells for example. That's the nature of phishing, the end result is you simply giving your information willingly (but probably unknowingly) to a scammer to log in. It should be obvious but anyone you GIVE your passwords to will have access to those accounts.

---

Good thing I log in with the OTP at the last second.

Got the same email, but with the correct price.
I've also got this kind of advertising mail a lot, usually a few days after something is added to cash shop, so I didn't give it too much thought.

Oh I got this email as well, seems like any other mails from SE