Almost Hijacked....

NewParadigm · April 19, 2012 1:23AM

I reveived a rather disturbing message from a "supposed" ebay buyer. In short, he claim that he paid for an item that I sold him and I was ignoring his emails. Further, if I don't respond promptly, he was going to call the police. Suspicious, I look up the buyers ID and see that I have no record of him buying anything from me. So, I click to respond and it asked me to log in. At this point, it looks 100% legit, except I noticed the URL was not that of ebay; it was a strange address with a foreign suffix.

I believe this is how they hijack you account. You log in, enter your password and user name, then it brings you the legit ebay home page. At this point, they have just seized your information. Here is what the email looks like.

I like the reply-to on the top: us the yellow button

SmEagle1795 · April 19, 2012 1:26AM

<< I reveived a rather disturbing message from a "supposed" ebay buyer. In short, he claim that he paid for an item that I sold him and I was ignoring his emails. Further, if I don't respond promptly, he was going to call the police. Suspicious, I look up the buyers ID and see that I have no record of him buying anything from me. So, I click to respond and it asked me to log in. At this point, it looks 100% legit, except I noticed the URL was not that of ebay; it was a strange address with a foreign suffix.

I believe this is how they hijack you account. You log in, enter your password and user name, then it brings you the legit ebay home page. At this point, they have just seized your information. Here is what the email looks like.

I like the reply-to on the top: us the yellow button >>

Can you PM me the URL? I work for a computer security company and we frequently work with various government agencies to get phishing attacks like this taken down. I'd recommend that you right click on the link in your email client and copy it rather than open it again.

Thanks!

derryb · April 19, 2012 1:28AM

"I will reclaim you to ebay" should have been the first red flag.

Computer users should never log into any type of personal account from an email link.

Ahrensdad · April 19, 2012 1:28AM

Good catch.

steveben · April 19, 2012 1:29AM

if you visited their link...they probably checked for every exploit known against your computer...you might want to run anti-virus software or a malware removal app now.

JamesM · April 19, 2012 1:31AM

you want i to reclaim this to police?

lasvegasteddy · April 19, 2012 1:37AM

email was from from...@ebey.us...

i always look at email address sent from with incoming emails

mingot · April 19, 2012 1:45AM

<< email was from from...@ebey.us...

i always look at email address sent from with incoming emails >>

Don't ever let a "good" email address lull you into a false sense of security.

It's trivial to forge them, but most spam filters should catch it -- but still, don't depend on the email address.

The best advice here was to always go to the site from your browser and never from a link in an email. Even if it's legit, just don't ever do it to break the habit.

coinkid855 · April 19, 2012 1:45AM

The scariest one I've ever received was a Paypal one I got maybe 5 years ago. When you clicked the link to sign in, it brought you to a very real-looking Paypal home page.

I was about to enter my information, when I noticed something weird. The address on the top of the page just looked "off." It WAS Paypal.com, but when I moved the window, the address bar tried to follow my motion! It was literally an image of the real address sitting on TOP of the actual address window. I had never seen that done before, and it almost tricked me! It was interesting to move my browser window around and watch the fake address bar trying to keep up! Lol

-Paul

Coinlearner · April 19, 2012 1:48AM

... Once a week,I get a "Paypal" message that something is wrong with my account and to avoid suspension,need to log in using link in mail. Just report it to ebay/Paypal and forget about it.

MFH · April 19, 2012 1:49AM

<< "I will reclaim you to ebay" should have been the first red flag.

Computer users should never log into any type of personal account from an email link. >>

I will reclaim you - that made me laugh as well.

Like saying: I've been in this country a short distance.

I never respond to any emails that make me link to any website.
In this case, I can just as easily go on line to my own eBay account
without some scammer's help.

Glad you caught this. Did you report it to eBay ?

NewParadigm · April 19, 2012 1:59AM

Yes, I reported this to eBay. I recently sold a lot of gold on ebay. So it was made it realistic that an inquiry would be made.

lasvegasteddy · April 19, 2012 2:02AM

<< 

<< email was from from...@ebey.us...

i always look at email address sent from with incoming emails >>

Don't ever let a "good" email address lull you into a false sense of security.

It's trivial to forge them, but most spam filters should catch it -- but still, don't depend on the email address.

The best advice here was to always go to the site from your browser and never from a link in an email. Even if it's legit, just don't ever do it to break the habit. >>

this case...it didn't pass 1st hurdle in email address...ebey is obvious

19Lyds · April 19, 2012 2:12AM

<< "I will reclaim you to ebay" should have been the first red flag.

Computer users should never log into any type of personal account from an email link. >>

Agree.

If I receive something from someone I've not done business with, and I DO know who they are since I get notified when something sells, I report it to spoof@ebay.com

I even report all emails from PayPal to spoof@paypal.com just to be sure they are valid.

NewParadigm · April 19, 2012 2:25AM

The ebay representative advised me to forward all suspicious emails to:

spoof@ebay.com

tlake22 · April 19, 2012 2:29AM

Obviously from someone with no grasp of the English language.

abitofthisabitofthat · April 19, 2012 2:40AM

<< The ebay representative advised me to forward all suspicious emails to:

spoof@ebay.com >>

Where I am sure that they will delete it without reading it.

If you sell on ebay, get used to it. This is a daily event for me.

Never follow a link in any 'ebay' e-mail. Delete them all without opening, and use ebay's message system.

astrorat · April 19, 2012 4:20AM

<< Obviously from someone with no grasp of the English language. >>

How is life in the glass house?

Message edited to add the winky.

Timbuk3 · April 19, 2012 4:58AM

Thanks for the heads-up !!!

TwoSides2aCoin · April 19, 2012 5:11AM

oboy

ebey.us

That's the first clue. email is a trash can. Why open up the garbage can to do business regarding eBay ? Go to the message center in eBay and leave the trash alone.

al410 · April 19, 2012 5:18AM

A couple years ago I got a random pin number generator from paypal, so I have to enter my password and behind that I enter the random pin number. It is a small fob and when you push a button on it six random numbers show in a small screen and you enter it . It expires in about 60 seconds so if you don't enter it or enter wrong number it will not log you in. It works on Paypal sign-in and ebay sign-in. I can't remember but I think i paid a one time $5 for it.
AL

notwilight · April 19, 2012 5:24AM

<< The ebay representative advised me to forward all suspicious emails to: spoof@ebay.com >>

I used to do that. I haven't bothered for a few years. I get 3 or 4 of that phish per week. Having sold thousands of low cost presidential dollars and other moderns on ebay my email address is in a lot of buyers email list so I get a lot of this. As an aside, I also get porn spam frequently from ebay customers who have downloaded a virus and now the virus is sending out spam in their name.

--Jerry

19Lyds · April 19, 2012 5:25AM

<< 

<< The ebay representative advised me to forward all suspicious emails to:

spoof@ebay.com >>

Where I am sure that they will delete it without reading it. >>

Each of these is read and responded to. At least that has been my experience with each report I submit and I'm really a nobody.

johnny9434 · April 19, 2012 5:40AM

<< The ebay representative advised me to forward all suspicious emails to:

spoof@ebay.com >>

i do it everytime i get something funny off of ebay

TwoSides2aCoin · April 19, 2012 5:49AM

It's frustrating having to read how stupid people with nothing better to do than try and scam people out of their money, have enough energy to work twice as hard doing evil as it would take to do good.

coinman23885 · April 19, 2012 1:14PM

<< email was from from...@ebey.us...

i always look at email address sent from with incoming emails >>

That's the first thing that stood out to me too. As a general rule, I never answer these things directly from my email. I close the browser, start a new browser window, and go directly to the eBay site. Any messages can be accessed from the "My Messages" section. There is never a reason to be fooled into a scam like this.

coinman23885 · April 19, 2012 1:15PM

<< The scariest one I've ever received was a Paypal one I got maybe 5 years ago. When you clicked the link to sign in, it brought you to a very real-looking Paypal home page.

I was about to enter my information, when I noticed something weird. The address on the top of the page just looked "off." It WAS Paypal.com, but when I moved the window, the address bar tried to follow my motion! It was literally an image of the real address sitting on TOP of the actual address window. I had never seen that done before, and it almost tricked me! It was interesting to move my browser window around and watch the fake address bar trying to keep up! Lol

-Paul >>

Now that's scary. I have never heard of something like this, and I didn't even know this was technically possible.

WTCG · April 19, 2012 1:41PM

This is a typical phishing email. Always check the URL address of the link before logging in.

Almost Hijacked....

Comments

Leave a Comment