Log in

No account? Create an account

March 2018



Powered by LiveJournal.com

Phished! but not caught

I recently made a purchase on eBay and I just received a fake email phishing for my information.
My first clue was that I was aware that people send fake email phishing for account information
My second clue was that my bank calls me when something suspicious happens, and I have had no calls from my bank. (really, they called me at 11pm because I made an online purchase that went through a service in Israel. I thanked them.)
So I opened a new browser and went to ebay to check my account. There are no unusual charges there.
Ebay has a Spoof Email Tutorial
There is also good information at Anti-Phishing Working Group
Consumer Advice: How to Avoid Phishing Scams

Be suspicious of any email with urgent requests for personal financial information
Don't use the links in the suspicious email to get to any web page
Avoid filling out forms in email messages that ask for personal financial information
Always ensure that you're using a secure website.
Regularly log into your online accounts
Regularly check your bank, credit and debit card statements to ensure that all transactions are legitimate
Make sure that your browser is up to date and security patches applied

I forwarded the spoof to ebay. And they have confirmed that it wasn't from them.
So I though I would post it here for the edification of my friends.
Just don't touch the link or it will SUCK OUT YOUR SOUL!!.
Date: Mon, 13 Dec 2004 18:21:20 +0100
To: sheherazahde
From: "eBay Account Management" <aw-upd@ebay.com>
Subject:Safe Harbor Notice

eBay Safe Harbor Department Notice (2480133428)

Dear eBay Member,

Your bank has contacted us regarding some unauthorized charges of your credit card via the eBay system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your eBay account. Please sign in to eBay using the link bellow, and update the requested information. Please verify all the info requested to be accurate. None of the personal information requested will be stored on our system, everything is used only to verify that you are the rightful owner of the account and of the credit card linked to your account.
We apologize for any inconvenience caused and we would like to thank you for your cooperation.
Please use this link to verify the security information:
It is highly recommended that you right click on the link and select "Open in new window" option
as some mail clients will not allow you to proceed!
http:// cgi1.ebay.com/aw-cgi/ebayISAPI.dll?signin=1&user=3124¬ice=2480133428


eBay Trust and Safety Department


Don't you just love those?

As a seller on eBay I get at least one a day, either from eBay or PayPal. One tip off is that eBay will always use your seller ID, and PayPal uses your full name in the greeting.

Unless I get an email that I KNOW is from either my parents or a good friend, I NEVER click the link. Even if the site you end up at doesn't ask for your personal information, you could still have a keystroke program downloaded without your knowledge, which is far worse!

Oh man, but they're doinga bad job too.

My mother visited Ebay, but didn't do anything there. But she got a notice like that.
I get these all the time - to the e-mail account that hasn't been affiliated with eBay for about two years. I forward them all to Spoof@ebay.com... they take it from there.