New Phish - Warning

Web | 2/1/06

[pabianice]

Got a new, sophisticated phish yesterday:

===========================================

eBay sent this message!

Your registered name is included to show this message originated from eBay. Learn more.

Question from eBay Member -- Respond Now

eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will not reach the eBay member. Use the Respond Now button below to respond to this message.

Question from user

We are contacting you about the following item: Toshiba rd-xs54 dvd Recorder w 250 gig hard drive (#5856334211)

The seller, lkaroll tells us you have mutually agreed not to complete the transaction (e.g. because you returned or are returning the item for a refund or because there was a misunderstanding) and has requested a credit for their eBay fees.

Please respond by 28-Feb-2006 so eBay knows whether you have agreed.

Best Regards.

Respond to this question in My Messages.

Thank you for using eBay http://www.ebay.com/

=================================================

Clicking on the mail brings you to a page that looks like the ebay sign-in page, asking you for your member ID and password. However, when you enter your password, the page does not, as usual, finish entering it and then automatically enter your password asa is the case with ebay. Strange. I hesitated.

I did not remember buying or bidding on this item. A check of the entire header using "options" revealed the following header:

Return-Path: pwrchute@pslx.org Received: from mxsf22.cluster1.charter.net ([10.20.201.222]) by mtai02.charter.net (InterMail vM.6.01.05.04 201-2131-123-105-20051025) with ESMTP id 20060131234749.MTFY24101.mtai02.charter.net@mxsf22.cluster1.charter.net for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from mxip11a.cluster1.charter.net (mxip11a.cluster1.charter.net [209.225.28.141]) by mxsf22.cluster1.charter.net (8.12.11/8.12.11) with ESMTP id k0VNlhhH007670 for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from www.pslx.org (HELO pslx.org) (202.32.143.132) by mxip11a.cluster1.charter.net with SMTP; 31 Jan 2006 18:47:39 -0500 X-IronPort-AV: i="4.01,242,1136178000"; d="scan'208"; a="2085161982:sNHT49858556" Received: (qmail 26983 invoked by uid 518); 1 Feb 2006 09:04:50 +0900 Date: 1 Feb 2006 09:04:50 +0900 Message-ID: 20060201000450.26980.qmail@pslx.org To: Subject: Message from eBay Member From: "member@ebay.com" member@ebay.com Content-Type: text/html

This definitely does not look like a real message from ebay.

Beware.

[Diana in Wisconsin]

I sell books on Amazon.com. I get phished like this on a weekly basis. They pretend to be Amazon.com with urgent info for me, or they're threatening to cancel my account, or they tell me someone ELSE has been trying to get at my CC number and I need to re-enter it...blah, blah, blah.

While the graphics are spot-on, there are always grammar and spelling errors. *Rolleyes*

It's good to warn people of this though, so, Thanks! :)

[NRA1995]

If I want to know what's going on with my eBay purchases I just go right to the site, I don't open e-mail which MAY be from them.

[Blood of Tyrants]

Foward it to ebay and ask them.

There is another one where people post expensive items for low Buy-it-Now prices and then if you attempt to contact the seller about it, you get an email from ebay saying that the phisher has basically stolen the information from a legitmate seller and is using it in some sort of scam. I found it when I was looking at upper end cruiser motorcycles. The dead giveaway is the ridiculously low price and no VIN.

[FReepaholic]

Legitimate email from Ebay will always be copied to your messages area in your "myEbay" account area. If it ain't there, it ain't legit.

[Lokibob]

Forward the email to spoof@ebay.com. It is important that all phising letters go to spoof. they jump right on it.

[Lokibob]

I got a cute one the other day:

It was a 2nd chance offer for a corvette ($1900.00). LOL, like I'm gonna fall for that.

Sure enough, it was a spoof.

[dmz]

I've had this kind of thing happen a good bit recently on ebay as well.

Ebay messages do not only come to the email account you registered with ebay, they also go to your Messages in MyEbay. If unsure, always log onto your ebay account and check for messages there.

Forward the bs email to spoof@ebay.com. You'll get boilerplate in reply from them, but it at least lets them know.

[When_Penguins_Attack]

why in the sam hill would you respond to someone who claims you did a transaction with them and did not finish it, when you never bid on it?

ANYONE who follows an email link to an ebay or paypal or bank site is, simply, stupid.

can't think of another way to say it

[Lokibob]

somebody should start an ebay ping list.

[dmz]

No more stupid than the folks who cannot help but post their useless opinions on these kinds of threads.

[AppyPappy]

This is new???

[devane617]

Stay away from Ebay. Problem solved.

[Doc Savage]

Are you that desperate to sell and buy crap that you have to go to this ridiculous website??? Anyone who uses or goes to e-bay or anyother such should be confined for observation.

[Rumple4]

Also don't leave your 9 year old daughters alone with their bass player.

[When_Penguins_Attack]

No more stupid than the folks who cannot help but post their useless opinions on these kinds of threads.

But of course that excludes your delightful and insighful missives. Right?

Best wishes and I hope those hemorrhoids get better.

[PilloryHillary]

As an avid ebayer, I've been getting similar messages for hte past couple of months. Some are ebay phish emails, but most are paypal scams. If one is in a hurry or distracted, it could be easy to fall for some of these scams. The links appear to go to ebay or paypal, but actually go to a completely different URL. BEWARE

[Mr. K]

I strongly disagree- I got a WONDERFUL pair of BOSE 911 speakers from ebay for about 1/4 the cost of a new pair.

They are the best speakers I have ever owned

[devane617]

Doc, Ain't that the truth...Ebay will continue to get worse as the scammers get more sophisticated. Ebay has to change the business model or risk problems.

[MizSterious]

And here's another scam I've seen and heard about a few times. You win the auction, and you pay with PayPal (which doesn't give the seller any of your banking or credit card numbers). Then they don't collect the funds, and the seller tells you they need you to pay via electronic check or credit card--which does give them that information. It happened to me this week, and I backed out of the sale and reported them to eBay.