Be careful out there!

[colorider]

Perhaps some of you have heard about some of the "Too good to be true" deals on eBay lately.

Here is an email that came through my motorcycle forum that provides info on how some of this happens.

=====================================
Just after getting *NAME REMOVED mail* on the VFR list about this
scam to try to steal eBay username and
passwords(http://cgi.ebay.com/ebaymotors/ws/eB...tem=2448284897)
I just got an email to my address that I use for my eBay account that
claims to be from eBay and is styled to look just like an ebay page,
but also is trying to trick people into filling out the form with the
username and passwords. The email subject is 'ebay security measures' and
looks just like an ebay page, but says "According to our site policy
you will have to confirm that you are the real owner of the eBay account
by completing the following form or else your account will be deleted."
and below that are the username, password, and email address form
boxes. If someone entered their info and hit the 'sign in' button, the code
for the form would have the username and password sent to the address
security@ebay-moreinfo.com, not eBay. I filled his box up with a few
username and password descriptions of the various ways I'd like to see
his scammer ass die, and reported both scams to ebay, but beware, ebay
scams are on the rise.

A whois query shows the ebay-moreinfo.com domain to belong to:

Domain Name.......... ebay-moreinfo.com
Creation Date........ 2003-09-13
Registration Date.... 2003-09-13
Expiry Date.......... 2004-09-13
Organisation Name.... Hinson William
Organisation Address. 264 Terry Drake Road
Organisation Address.
Organisation Address. Owens Cross Roads
Organisation Address. 35763
Organisation Address. AL
Organisation Address. UNITED STATES

Admin Name........... Hinson William
Admin Address........ 264 Terry Drake Road
Admin Address........
Admin Address........ Owens Cross Roads
Admin Address........ 35763
Admin Address........ AL
Admin Address........ UNITED STATES
Admin Email.......... ebay_moreinfo@yahoo.com
Admin Phone.......... +1.4085551212
Admin Fax............

Real info or ID theft, I dunno, but his home phone number is (256)
519-6760 should anyone care to also call him to find out.

*NAME REMOVED*
98VFR800
00ST1100

===================================

Beware!!

[SteveLuman]

I had some dumbA$$ send me a spoof eBay email today. He couldn't even spell requires right.


Dear valued eBay member,
It has come to our attention that your eBay billing information records are out of date . This requiers you to update your billing information with no delay in order to avoid any future problems with eBay's online service.

Please click here to update your billing records.

Once you have updated your account records, your eBay session will not be interrupted and will continue as normal. However failure to update may result in cancellation of service, Terms of Service (TOS) violations or future billing problems.

Thank you for your time!
Marry Kimmel,
eBay Billing Department team.


Announcements | Register | SafeHarbor (Rules & Safety) | Feedback Forum | About eBay
Copyright © 1995-2003 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
Use of this Web site constitutes acceptance of the eBay User Agreement and Privacy Policy.

Needless to say I forwarded to spoof@ebay.com

[tim.s]

The same thing goes for fake Paypal messages and other services.

The best thing to do when you get a solicitation for your personal info is to go to the site in question (i.e., the real ebay site, the real Paypal site, etc...) and verify the request is legit.

If you can't confirm the request from the site in question, contact the site's admin or customer service directly and confirm.

The user should always initiate the supply of information.
Legitimate sites don't collect information through email.

[sfhondapilot]

Don't know if this has been covered elsewhere, but there is a new security flaw in Internet Explorer. Apparently, this flaw can cause a web side to spoof an alias url.

Here's a link to test to see if your browser is vulnerable.

Here's a description, as posted on the hot deals site:

New security vulnerability found in Internet Explorer: There is yet another new security exploit found in Microsoft Internet Explorer where a website can spoof the URL that appears when somebody clicks on a link. To see the exploit, use Internet Explorer, go here then click on the "click here to perform test" link, then look at the URL bar at the top of your browser. At the time of this writing, Microsoft has not put out a fix for this URL spoofing problem. This vulnerability is easy for a site to implement, and can cause major security problems with scam artists using the exploit to have people click on a link, appear to be from a real website, then ask the user to input personal private information. As always, I recommend that people use common sense as their best protection against giving up sensitive personal information to scam artists.

[kadiir]

Originally posted by sfhondapilot
Don't know if this has been covered elsewhere, but there is a new security flaw in Internet Explorer. Apparently, this flaw can cause a web side to spoof an alias url.[snip]

I thought that was a feature as I've seen legitimate sites do that plenty of times.

Heh, reminds me of a case recently where an FBI agent got one of these ebay or paypal scams at home and it pissed him off so much that he "hunted down" the sender and arrested her. She got convicted a few months ago.

kad