Log in

View Full Version : ebay spoof















echnidna
31st May 2006, 07:03 PM
I got an email from ebay with the subject heading
"How to trade safely on eBay.com.au"

On contacting ebay directly without using links on the suss email,
ebay reports it is a spoof.

Beware!

Auld Bassoon
31st May 2006, 08:24 PM
Lots of that about. Be wary of the links and, if you can, check the email headers to see whete the mail originated. Even that's not enough a lot of the time though as the origin can also be spoofed.

Rossluck
31st May 2006, 08:46 PM
Yep, I was sucked in early one Saturday morning. Hungover and not yet awake, I answered an email that said my Ebay account would be cancelled if I didn't supply the "following details". I managed to wake up when they asked for my password ....

I have a similar message popping up now from a fake NAB, asking for "user details confirmation"....

They're out there.

ozwinner
31st May 2006, 09:04 PM
If you get spam report it here (http://www.acma.gov.au).

Its an Oz site from the goverment aimed at stamping out spam.


Al :)

Barry_White
31st May 2006, 10:21 PM
If you get spam report it here (http://http://www.acma.gov.au/ACMAINTER.524438:STANDARD:1549240377:pc=PC_2008).

Its an Oz site from the goverment aimed at stamping out spam.


Al :)

Hey Al

That link just goes to Microsoft UK.

ozwinner
31st May 2006, 10:37 PM
Ok try now Baz, hopefuly its fixed.

Al :o

RETIRED
1st June 2006, 12:00 AM
Hey Al

That link just goes to Microsoft UK.Appropriate I reckon.:)

JDarvall
1st June 2006, 08:51 AM
I got that message too. Didn't know it was spoof though.

The bloke pictured looked so 'sincere' too didn't he. cheeky buggas.

echnidna
1st June 2006, 01:26 PM
I just got an ebay spoof,

terd says,
"Hello,please let me know about the item you sold
me,the money for the item listed in the auction that i
won has been sent,but i don't know anything about the
item,please let me know if you shipped the item to
me,because if not you will force me to report you to
ebay,and they will put an unpaid item strike on your
account.I'm sorry if this mail is an inconvenience to
you,but please understand me."

anyway its been forwarded to spoof@ebay.

Hey Al,
That link you provided, sumthin a bit odd.
reportedly bigpond has already made that spam button available to all its customers.
Except us,
You sure its not a spoofing website?

nakal
1st June 2006, 01:45 PM
Can anyone tell me how you know it is a spoof.

I received the same email about safe trading but it looks like it goes to teh eBay website. It does not ask for any details. Am I missing soemthing here?.:confused:

ozwinner
1st June 2006, 06:46 PM
Spoofs ask for your account details and password.
Real world businesses dont, as obviously they know them already.

Al :)

zathras
1st June 2006, 08:45 PM
Can anyone tell me how you know it is a spoof.

I received the same email about safe trading but it looks like it goes to teh eBay website. It does not ask for any details. Am I missing soemthing here?.:confused:

Me too, It looks the real deal, the links are finishing with .ebay.com

Bob, did your email have the line at the top where it shows your real name and ebay ID?

echnidna
1st June 2006, 09:04 PM
Yep the spoofer had that in it.
The link addresses in the email were different to the adresses shown when I put the mouse on them.

The next one - message from member was for an odd item number so i opened another browser went to ebay and did a search for that item number,
it was a cellphone. I don't buy or sell them.

The return email from ebay was pretty fast, telling me they found a keylogger virus attached to the email. So I'm busy now running all manner of spyware virus checkers including trend online.

zathras
1st June 2006, 10:06 PM
Hmmmm, I still think the one I got is the real deal.

I've just done a domain registration lookup for click3.ebay.com and it is one of their assigned addresses.
As you say, the addresses when you hover are not the same as shown on the screen, but they are legitimate ones into ebay's empire...

Was the keylogger on the "How to safely trade on ebay.com.au" message, or the other one you mention - which is definately suss from the way you describe it.

echnidna
1st June 2006, 10:10 PM
Both of the suss emails from "ebay" were confirmed by ebay as spoofs.

The keylogger was associated with the "message from member " spoof