WARNING!!! New eBay attack message - watch out1

I posted this here because I wanted everyone to know about this one:

Got this today!!!

Trust me, this is EVIL. Within the message is a link that starts out with what appears to be a real ebay link. I am telling you it looks real! When I opened the message source, I saw that the link was redirected in the link itself to an IP address in ASIA!!! (203.145.171.205)

Of course, it has all of the eBay logos and real links to ebay features.

Holy smokes, this one is a real threat. I almost did not post this here because I thought it might be real for a second when I saw the link

This is scary stuff - I forwarded it to [email protected]

----------------------------------------------------------------------------------

 

Thanks Jon! I haven't got this one yet. I'm going to put a duplicate in our Ebay Forum.

 

Now I'm getting concerned---are these losers out to attack individual users, or ultimately give eBay a bad name by way of its customers?

It's disgusting.

I wonder how many of these get out to non-eBay members...

BTW: better to post it here even if it LOOKS suspicious, even if it is legit.

 

They're after your financial life Rudy. Steal a credit card number and your whole financial existance since your first child-hood bank account can be found. It's not that hard really.

One of the main reasons I will never have one.

 

Of course, I got the email back from eBay telling me that this email was a spoof.

One thing we all can check. All eBay email comes from the IP address range that starts with 66.135.215.xxx.

If you get an email from eBay, and it is not in that range, it is a fake, no matter how good it looks.

These guys are good! I bet they rake in some bucks on this one.

One more word of advice to all: PLEASE make sure your eBay password is not the same as your PayPal password. I know many people who keep it the same for ease of rememberance, but this could be a costly error.

OK, enough preaching...........

:-jon

 

Jon, thanks for bringing this to our attention. I received one spoof eBay message asking for me to verify information pertinent to my account.

 

My passwords for sites that deal with money are long, uncommon, and combine letters and numbers that only make sense to *me*.

One idea: get a Discover card, and then download the software that generates a single-use credit card number you can use online. One of the safer ideas I've ever heard of!

 

Jon,

Thanks for alerting us to the fake eBay message. I received mine yesterday, and remembered this thread. By the way, what also should tip people off is that in the e-mail's subject line, unauthorized was spelled "unauthorised". Did anyone else happen to pick up on this error?





Ed Hurdle
HeavyDistortion

 

I noticed that. Remember, this thing comes to us from Australia!! So they use the "Queens" spelling. This thing is done very well, isn't it?

 

The host should have been yanked by now. If the link in that fake email went somewhere, I bet it's been yanked now.

Ed's correct, as many viruses (viri) and phony messages often come from overseas, simple spelling mistakes and grammatical errors aren't caught.

"All Your Base Are Belong To Us." - Chinese video game proverb.

 

I just got one 10 minutes ago.

Jay

 

Just got a follow up email "Additional Request!"
I traced it back to the same Australian IP address, even though this time they disguised it as an IP from Washington State

 

I also got this email and noticed this... but at the time what REALLY caught my attention was the use of "authorized" in the body of the text. Obviously a cut and paste job by a foreigner!