Dangerous phishing Ebay message

Barry · March 11, 2007 8:37AM

I got this via my Ebay mail today:

I want to know if this is the same item with the item list at this address: http://members.ebay.com/aboutme/joemitk

The link appears to be a legit ebay site, however when I went to it, it took me to an Ebay sign-in page, which I knew wasn't right as I was currently signed into MyEbay. How do the scammers redirect a valid ebay URL to their own site?

kranky · March 11, 2007 8:47AM

Don't think they can redirect the URL itself. Looks like his "my ebay" page has a script embedded in it to mimic the ebay login.

Russ · March 11, 2007 8:57AM

Here's where it goes if one fills in the info:

http://us.1.p10.webhosting.yahoo.com/forms?login=buletron&confirm=sent.html

Russ, NCNE

lsica · March 11, 2007 9:41AM

What's the link to report this to eBay?

Russ · March 11, 2007 9:43AM

http://pages.ebay.com/securitycenter/

Russ, NCNE

lsica · March 11, 2007 9:50AM

Reported

Russ · March 12, 2007 8:46AM

Bump.

Russ, NCNE

Barry · March 12, 2007 9:02AM

I got an email back from Ebay today saying it was a hijacked acct with a malicious script. They are dealing with it.

Word of warning - even with an apparently good link, sh*t happens. If you're presented with a sign-in page when you don't expect it, beware.

Russ · March 12, 2007 9:06AM

<< <i>Word of warning - even with an apparently good link, sh*t happens. >>

Yep, all they did was code the About Me page to look like a sign-in page. The URL itself is legit.

Russ, NCNE

OffCenter · March 12, 2007 9:08AM

My buddy who is fairly new to ebay (less then two years now) got caught with that one three days ago. He contacted ebay and they cancelled his tampered with auctions. Dude who hacked it had an addition on his auction page saying that if you were interested in BIN, to e-mail him at the scammers e-mail addy. Luckilly he caught it before anyone got burned.

arthurlegand · March 12, 2007 9:17AM

i have just got three emails trying to get my info in the last 4 days and i reported them to ebay how any one else

seatedcollector · March 12, 2007 9:20AM

thats easy to avoid, NEVER sign in through an email link to ebay or paypal

arthurlegand · March 12, 2007 9:27AM

mine were through ask a seller a question and they had links attached

jgrinz · March 12, 2007 9:29AM

I am finding they hit High end stuff alot as I have had two in the last week with my COMPLETE SILVER EAGLE
ROLL set up at auction and closing in 5 hours.
Here is one I recieved and looks legit BECAUSE IT HITS YOUR EBAY MESSAGES FOLDER!!! but its not

*******************

Question from muskytinker
muskytinker( 913)
Positive feedback: 99.0%
Member since: Nov-22-02
Location: Lancashire, United Kingdom
Registered on: www.ebay.co.uk

Item: Bullion Bonanza - 1986-2007 Silver Eagle Rolls AS A SET (320088296733)

This message was sent while the listing was active.
muskytinker is a potential buyer.

Hello,
My name is Regina Thompson.
I just saw this item of yours and I remember seeing the same item two days ago here, take a look:
http://3392319564/ebay/?ws/eBayISAPI.dll?ViewItem&item=200085847636

Details for item number: 320088296733
Item title: Bullion Bonanza - 1986-2007 Silver Eagle Rolls AS A SET
Item URL: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=320088296733&sspagename=ADME:B:AAQ:US:1
End date: Monday, Mar 12, 2007 21:00:00 PDT

**************************

Notice the Link address which is NOT clickable in your messages folder which is the give away - DO NOT CUT and paste
these !!

Hope this helps ANYONE to stay away from these and report them right away!1

Mike

arthurlegand · March 12, 2007 9:33AM

this is one of the same persons that sent me mine

Russ · March 12, 2007 9:51AM

<< <i>mine were through ask a seller a question and they had links attached >>

Yep, these latest scams, the about me page example in this thread and the "I saw the same item" phish both come through eBay so they show up in the messages section.

Russ, NCNE

Dangerous phishing Ebay message

Comments

Leave a Comment