A new phish (to me, anyway)

[lovingboth]

Pretending to be from SecondLife:

Dear Resident,

We are having some difficulties in logging you on (Error Code: END01),
in order to maintain access to SecondLife.

Click here to avoid online service suspension.

.. with 'here' being somewhere other than secondlife, of course.

Where's the value in hacking SL accounts rather than the more usual bank / PayPal / eBay etc ones?

Comments

[bondagewoodelf]

Where's the value in hacking SL accounts rather than the more usual bank / PayPal / eBay etc ones?

Some people use the same user/password combo everywhere

[valkyriekaren.livejournal.com]

I don't know much about Second Life but can't you 'buy' things in-game, either using game money or bank funds? If so, they may be able to make or intercept payments/claim refunds in your name if they have your password.

[tenlegspider.livejournal.com]

They might want to steal your virtual stuff, since it has some real-world value. They could also as you to confirm something or other by way of your credit card details which would have a lower success rate but much more profit per hit. Maybe they'll even work both angles at once.

[lovingboth]

I think it's partly a surprise that anyone uses it now. See the recent 'ICQ has a vulnerability' alert for an even better example of that.