Saturday, February 04, 2012
Register  Login
  Our sponsors   
  Users currently online   
Membership Membership:
Latest New User Latest: kevin
New Today New Today: 0
New Yesterday New Yesterday: 0
User Count Overall: 56

People Online People Online:
Visitors Visitors: 5
Members Members: 0
Total Total: 5

Online Now Online Now:
Periwinkle Communications
Viruswarn banner

Welcome to the Viruswarning forums.  All your original content has been ported to the new forums as  well as new content and additional opportunities to interact with the authors of Viruswarn.com.  You can always access old content at www.leedrake.com/forum .  You may find some formatting was lost in the conversion and the older versions of the posts to be more readable....

But at least it's all here.

Enjoy!

  Viruswarn Forums
Subject: New Ebay based phishing technique

You are not authorized to post a reply.   
Author Messages
Lee Drake
Posts:238

07/13/2005 12:03 AM  
What it is There is a new Phishing technique that exploits EBay user's sympathy to try to steal their passwords. The email sends a message claiming to be from an elderly woman saying that she was trying to buy a wheelchair and did the recipient put one up for sale. (No doubt there will be other variations to this message's content). There appears to be a way to reply to the user through pressing a button on the email, which appears to take you to the eBay login screen so you can reply. The login screen is a fake one of course, designed to collect your username and password and then give you an error message. Once your username and password are compromised they could be used to place a fake item up for sale and collect money or to bid up or "shill bid" on an item. The email appears VERY legitimate and mimic's eBay's website, and message format. What should you do If you suspect you've fallen prey to this attack - you should immediately contact Ebay to let them know your account has been compromised, you should change your password on your account as soon as possible (using Ebay's normal password change facility) if you suspect your account info has been revealed. In general to avoid Phishing attacks: Treat all communications from any money-related company including banks, eBay, PayPal, Amazon, etc. as suspect. Always just open a browser window and log into the website from there - never click a link in a email - no matter how legitimate looking it is - to log in. Never enter personal information or passwords from such a link. To determine if a link is legitimate you can hover (without clicking) over the link image or link name (in both IE and Firefox) and the link's actual address will show in a yellow box. Note that what is WRITTEN in a link can be very different from where it takes you. Although a link may READ as going to one place, when you hover over it - it actually takes you somewhere else. EVEN IF A LINK APPEARS TO PASS THIS TEST do not enter any personal information from a link within an email. Further references Ebay Security center on fake emails: http://pages.ebay.com/help/contact_us/_base/results.html?tier0=account_security.html&tier1=0&tier2=0&datafile=account_security.html&item_id=&routing_code=IV%25C00243&contactTitle=Report+fake+eBay+emails+%28spoofs%29+and+unauthorized+account+activity&continueButton=Continue+%3E This concludes this Viruswarning notice. Lee Drake Aztek Computer Solutions, Inc. 274 Goodman Street North Suite B269 Rochester, NY 14607 www.azcomputer.net ldrake@azcomputer.net Phone: 585-242-2060 Fax: 585-242-9441 Cell: 585-509-0284
You are not authorized to post a reply.
Forums > Viruswarning Forum > Viruswarning archive > New Ebay based phishing technique



ActiveForums 3.6
  Register or Login


Forgot Password ?
Copyright 2006 by OS-Cubed, Inc.   Terms Of Use  Privacy Statement