While the BBS is busy deleting any thread that mentions account security, I sign into World of Warcraft and see...
The text reads:
Welcome to World of Wacraft!
Help us fight email scammers! Official Blizzard emails will
always come from an @blizzard.com email address and
will never ask you for your password. Please always check URLs
contained in any suspicious emails.