ALERT! -- Phishing virus inside the MMORPG.com password reset link -- BEWARE!

olepi · June 2020

I reset my password using the MMORPG email link to change my password. Windows 10 immediately flagged a phishing virus that steals passwords.

BEWARE!!!

botrytis · June 2020

Did you reset your password on this site first? Did you look at the header of the email? I often get ones that look like they are legitimate but are not based on routing. That is the only way to look at it.

olepi · June 2020

I used the link on the site. Got my email, reset my password, and logged in.

Within 2 minutes Windows Defender alerted to a phishing attempt in my email that occurred exactly when I got the reset email. And that was the only email I have gotten so far today.

Quizzical · June 2020

That sounds like a false alarm. Most likely, Windows Defender doesn't know exactly what the password reset e-mail looks like for this site. It saw a password reset e-mail, figured that it looked a lot like a fake password reset e-mail (since the fake ones try to look like real ones), and flagged it to warn you about it. If you got the password reset e-mail immediately after having requested it, then used it, and it worked, then it's almost certainly all legitimate, and Windows Defender warned you because it just didn't know that. Had you gotten a similar password reset e-mail that wasn't immediately after requesting it, then it probably would have been a phishing attempt, and Windows Defender would have been right to warn you about it.