Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

New Phish - Warning
Web | 2/1/06

Posted on 02/01/2006 6:08:04 AM PST by pabianice

Got a new, sophisticated phish yesterday:

===========================================

eBay sent this message!

Your registered name is included to show this message originated from eBay. Learn more.

Question from eBay Member -- Respond Now

eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will not reach the eBay member. Use the Respond Now button below to respond to this message.

Question from user

We are contacting you about the following item: Toshiba rd-xs54 dvd Recorder w 250 gig hard drive (#5856334211)

The seller, lkaroll tells us you have mutually agreed not to complete the transaction (e.g. because you returned or are returning the item for a refund or because there was a misunderstanding) and has requested a credit for their eBay fees.

Please respond by 28-Feb-2006 so eBay knows whether you have agreed.

Best Regards.

Respond to this question in My Messages.

Thank you for using eBay http://www.ebay.com/

=================================================

Clicking on the mail brings you to a page that looks like the ebay sign-in page, asking you for your member ID and password. However, when you enter your password, the page does not, as usual, finish entering it and then automatically enter your password asa is the case with ebay. Strange. I hesitated.

I did not remember buying or bidding on this item. A check of the entire header using "options" revealed the following header:

Return-Path: pwrchute@pslx.org Received: from mxsf22.cluster1.charter.net ([10.20.201.222]) by mtai02.charter.net (InterMail vM.6.01.05.04 201-2131-123-105-20051025) with ESMTP id 20060131234749.MTFY24101.mtai02.charter.net@mxsf22.cluster1.charter.net for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from mxip11a.cluster1.charter.net (mxip11a.cluster1.charter.net [209.225.28.141]) by mxsf22.cluster1.charter.net (8.12.11/8.12.11) with ESMTP id k0VNlhhH007670 for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from www.pslx.org (HELO pslx.org) (202.32.143.132) by mxip11a.cluster1.charter.net with SMTP; 31 Jan 2006 18:47:39 -0500 X-IronPort-AV: i="4.01,242,1136178000"; d="scan'208"; a="2085161982:sNHT49858556" Received: (qmail 26983 invoked by uid 518); 1 Feb 2006 09:04:50 +0900 Date: 1 Feb 2006 09:04:50 +0900 Message-ID: 20060201000450.26980.qmail@pslx.org To: Subject: Message from eBay Member From: "member@ebay.com" member@ebay.com Content-Type: text/html

This definitely does not look like a real message from ebay.

Beware.


TOPICS: Business/Economy; Culture/Society; News/Current Events
KEYWORDS: freepbay
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061 next last
To: pabianice

Another eBay/PayPal phish is to send you a message that your PayPal account has been charged $351.55 for a watch (in this case) and that if you aren't the winner, click here (ahem) to back out the funds. They even give you the seller's address (which, according to MapQuest, turns out to be phoney).

I guess they depend upon your outrage, and the oddball amount, to immediately "clear up" the situation.


41 posted on 02/01/2006 11:52:47 AM PST by Oatka (Hyphenated-Americans have hyphenated-loyalties -- Victor Davis Hanson)
[ Post Reply | Private Reply | To 1 | View Replies]

To: When_Penguins_Attack

You should know better than to use chronic_loser's lines, doncha think? She might get angry even though she has been banned or suspended. She might still be lurking. Or even posting under another name.

LOL. Have a nice day.


42 posted on 02/01/2006 12:29:38 PM PST by dmz
[ Post Reply | Private Reply | To 35 | View Replies]

To: dmz
huh? Humor has to be understood to be funny. Are you comparing me to some other poster or something? Did she insult you and get your panties in a wad? Should I send her flowers?

This is a weird little community you people have for yourselves here.

43 posted on 02/01/2006 12:50:51 PM PST by When_Penguins_Attack (Smashing Windows, Breaking down Gates. Proud Mepis User!!!!)
[ Post Reply | Private Reply | To 42 | View Replies]

To: When_Penguins_Attack

The door is thataway ...


44 posted on 02/01/2006 1:01:47 PM PST by dmz
[ Post Reply | Private Reply | To 43 | View Replies]

To: dmz
The door is thataway ...

and my butt is on top of my legs. If you need further invitation on puckering up, you might try freepmailing me (again!). I am out of this thread, but I have certainly enjoyed it. All the best.

45 posted on 02/01/2006 2:36:01 PM PST by When_Penguins_Attack (Smashing Windows, Breaking down Gates. Proud Mepis User!!!!)
[ Post Reply | Private Reply | To 44 | View Replies]

To: When_Penguins_Attack; Darksheare; MikeinIraq; darkwing104

sniff......


46 posted on 02/01/2006 2:44:06 PM PST by ARealMothersSonForever
[ Post Reply | Private Reply | To 45 | View Replies]

To: When_Penguins_Attack
I am not offended at all. I like playing with trolls. Here's a hint for one. Don't get into a battle of wits. You are clearly unarmed.

that was SOOOOOO original
47 posted on 02/01/2006 2:47:16 PM PST by MikefromOhio (")
[ Post Reply | Private Reply | To 26 | View Replies]

To: When_Penguins_Attack
This is a weird little community you people have for yourselves here.

There is nothing weird about common courtesy and manners. And what do you mean "you people"? Are you not drinking the kool-aid like the rest of us? /sarcasm
48 posted on 02/01/2006 2:48:09 PM PST by CollegeRepublican
[ Post Reply | Private Reply | To 45 | View Replies]

To: CollegeRepublican
There is nothing weird about common courtesy and manners.

I don't mind courtesy and manners. I think all the unwashed rabble should display them.

And what do you mean "you people"?

DMZ and all the voices in my head. Why? You want to invite others to this spitfest?

Are you not drinking the kool-aid like the rest of us?

by the gallon! It is so nice to feel loved and welcomed. Almost like my first 13 foster homes.

49 posted on 02/01/2006 3:02:14 PM PST by When_Penguins_Attack (Smashing Windows, Breaking down Gates. Proud Mepis User!!!!)
[ Post Reply | Private Reply | To 48 | View Replies]

To: When_Penguins_Attack

"I think all the unwashed rabble should display them."

Apparently excluding you of course.

"You want to invite others to this spitfest?"

See?
Excluding you.

"It is so nice to feel loved and welcomed. Almost like my first 13 foster homes."

Yup, definitely excluding you.


50 posted on 02/01/2006 6:42:53 PM PST by Darksheare (And baby says "RAAAAR!")
[ Post Reply | Private Reply | To 49 | View Replies]

To: Doc Savage

I plan on being the last person in America to get an eBay account, but yours is a ridiculous statement. To each his own. There's nothing inherently wrong with eBay. I wish I'd have thought of it.


51 posted on 02/01/2006 7:02:33 PM PST by Doohickey (If you choose not to decide, you still have made a choice...I will choose freewill.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Diana in Wisconsin

I have gotten similar messages pretending to be amazon.com. Should they be reported to Homeland Security or to the FBI?


52 posted on 02/01/2006 7:05:27 PM PST by RightWhale (pas de lieu, Rhone que nous)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Doohickey

53 posted on 02/01/2006 7:06:37 PM PST by July 4th (A vacant lot cancelled out my vote for Bush.)
[ Post Reply | Private Reply | To 51 | View Replies]

To: pabianice

I have gotten two from Paypal in the last week that have cloned the paypal site. Never trust a link in the e-mail. Usually the site that it links to gives it away.


54 posted on 02/01/2006 7:08:04 PM PST by Always Right
[ Post Reply | Private Reply | To 1 | View Replies]

To: Always Right

Unauthorized access to your PayPal account!


We recently noticed more attempts to log in to your PayPal account from a foreign IP address.

If you accessed your account while traveling, the unusual log in attempts may have been initiated by you. However, if you are the rightfull holder of the account, please visit Paypal as soon as possible to verify your identity:
Click here to verify your account






You can also verify your account by logging into your PayPal account at https://www.paypal.com/us/.

If you choose to ignore our request, you leave us no choise but to temporaly suspend your account.

We ask that you allow at least 72 hours for the case to be investigated and we strongly recommend to verify your account in that time.

Thank you for using PayPal!
The PayPal Team

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.

To receive email notifications in plain text instead of HTML, update your preferences here.



PayPal Email ID PP468


55 posted on 02/01/2006 7:11:51 PM PST by Always Right
[ Post Reply | Private Reply | To 54 | View Replies]

To: Doc Savage
Anyone who uses or goes to e-bay or anyother such should be confined for observation.

You don't get out much do you?

Or are you one of the jealous ones that hates seeing people make a LOT of money?
56 posted on 02/01/2006 7:16:59 PM PST by birbear (You know what? This is crap. We're going to stop this.)
[ Post Reply | Private Reply | To 14 | View Replies]

To: Mrs. Don-o
ping

Read and heed

57 posted on 02/01/2006 7:18:25 PM PST by don-o
[ Post Reply | Private Reply | To 2 | View Replies]

To: devane617
I have personally done over 870 transactions via Ebay over the past 2 years. I started buying telecom equipment for my business. Now I buy most everything there. Recently bought a 1996 Old 98 for the wife with 60k original miles, got it for $3500.00 sweet deal and the 91-96 Olds 98's get 30 MPG. For some of us Ebay is the perfect way to do business. And finding extremely hard to find parts is a cinch. I have bought parts from Italy, England, Australia, China, Taiwan, Hong Kong, France. Phishing is a problem in many places, I have got them from all the major credit card companies and a couple insurance companies. Always report it and never respond to an email. If you think it may be real contact the said company directly whether by emailing there site directly or by phone.
58 posted on 02/01/2006 7:20:35 PM PST by sleddogs
[ Post Reply | Private Reply | To 13 | View Replies]

To: sleddogs

GREAT place to find all manner of odds and ends and rare and exotic (electronic) components through to 'systems' scale items.

As others have pointed out, ONE has to use common sense and SHOULD be quite familiar with WHAT it is they are dealing in (one should be familiar with the technology AND the terminology). The devil CAN be in the details, to be sure.

Armed to the hilt with specific knowledge of the item-area one deals in, one can do okay 'trading' on eBay. Sort of a largish, nation-wide garage sale sort of affair if you will ...


59 posted on 02/01/2006 7:30:56 PM PST by _Jim
[ Post Reply | Private Reply | To 58 | View Replies]

To: pabianice

I was 'phished' the other day - with a VERY authentic looking "Second Chance Offer".

Only glitchs:

1) NO link back to eBay for the reqisite "Buy it now" link

2) NO appeareance of the 'offer' appearing in "MyMessages" on eBay

3) The sender wanted direct response to the e-mail at a yahoo.com account.

4) The sender/response address bore NO resemblance to the sellers name or ID on eBay.

5) Bad English, but only slightly so, in the "Second Chance Offer"; close examination showed enough mistakes to raise suspicians (those scammers REALLY need to hire some grammatical help!)

A quick note to the original seller of the item on ebay confirmed my suspicians; he was glad to have been informed of the 'phish' attempt.

I also sent the e-mail and e-mail headers to spam@eBay.com per standard recommended procedure on eBay's site.


60 posted on 02/01/2006 7:39:39 PM PST by _Jim
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson