WorldWorks has been the victim of several “spoofing” attacks in recent weeks. Someone is using our domain to send out e-mails that contain instructions or harmful information (Trojans, viruses).

PLEASE NOTE:

WorldWorks will NEVER warn you of “account suspensions or closures” or ask you to re-activate or change your forum account details. NEVER open an attachment included in this kind of mail. If you receive a mail from service@worldworksgames.com or denunger@worldworksgames.com dealing with these issues please report them to me. I am doing everything I can to resolve the issue with our hosting service.

Here’s an example of the kind of mail you might receive:

YOUR ACCOUNT IS SUSPENDED FOR SECURITY REASONS

Dear Worldworksgames Member,

We have temporarily suspended your email account denunger@worldworksgames.com.

This might be due to either of the following reasons:

1. A recent change in your personal information (i.e. change of address).
2. Submiting invalid information during the initial sign up process.
3. An innability to accurately verify your selected option of subscription due to an internal error within our processors.
See the details to reactivate your Worldworksgames account.

Sincerely,The Worldworksgames Support Team

When I've gotten spoofing emails in the past, I just log onto the account in question, rather than respond to the email. If I can log in, obviously the email is a spoof.

Once I have determined I've received a spoofed email, I report said email to the website in question.

eBay is very interested in their spoof emails by the way. Interestingly enough, the last time I got a string of the eBay ones, within a day of my reporting them to eBay, they stopped.

Oh yeah, thanks for the warning Denny!

Skunk

Check out my fantasy campaign, Wizard Quest, a world using Wizards of the Coast’s 3.5 DnD system by visiting .

Check out the flash teaser for my sci-fi campaign, , coming Jan 2007. I’ll be using D20 Future for the rules.

Check out what games I’m working on and their status by visiting .

Tampa Bay Game Players Forum is now available, .

These are incredibly common, and incredibly easy to do. Everyone - and I mean everyone - should have a policy NEVER to use a link from an email that takes you somewhere that asks for a password or for sensitive information, unless you initiated the transaction or email process.

Even the initiated can get fooled with IPs and domain names. I've seen webapps.usacitibank.com used before in a fishing email - it sure looks like citibank, but ultimately, it's not.