The Winning Poker Network (WPN), home to ACR Poker and several other online-poker sites, has issued a warning to its players regarding a coordinated e-mail "phishing" episode employing an internet domain designed as though it is associated with WPN.
The phishing emails, which WPN describes as having been received by "a small number of customers," came from the email address "gameintegrity@wpnpoker.com". The "wpnpoker.com" domain is not affiliated with Winning Poker Network or any of its member skins. WPN's official network home is at winningpokernetwork.com, and WPN stressed that integrity- and security-related emails would only come from the address "gameintegrity@winningpokernetwork.com".
According to WPN's own emailed warning, "These emails posed questions about poker game play, requested personal verification documents, and asked players to record videos of their gameplay. These emails also contained unsecure links leading to malware downloads." The requested information could be used to hijack a player's account and reset a password, thus allowing a player's online balance to be drained or transferred.
Domain used in phishing attacks may be Netherlands-based
The emails employed the correct "gamesecuriry" internal portion of the address, combined with a domain name that could easily be mistaken as a genuine WPN-controlled domain. That speaks to the degree of knowledge the perpetrator or perpetrators have about WPN's online-poker services and methods of communication with players.
