A different approach to ebay phishing

[Gareth]

Source: http://www.scmagazine.com/news/index...&newsType=News

Originally Posted by SC Magazine

Irate message hides fishy phishing motive

An interesting phishing scam has emerged that claims to be from an eBay user rather than the auction company itself.
Throwing usual spoofing tactics out of the window recipients of the scam will find an irate message implying that they have not dispatched an order that has been paid for. Users then click on a link that asks them to log into their account – but the link is a spoof site.

Hats off to whoever thought of this approach - I can see a large number of people falling for it unless they've been previously made aware of the danger. Needless to say, I shall be re-iterating to friends & family who use ebay not to click links in emails.

[Halcyon]

I fell for this a while ago.
Now, any e-mail that I get that is from an ebay member or ebay, I check out the address before clicking to make sure it is the real site.
Some are very convincing indeed.

[basa]

Surely you would know if you had recently posted an item, what it was and to whom it was sent ??

Why would a spurious email fool anyone ?

[Gareth]

Originally Posted by basa

Surely you would know if you had recently posted an item, what it was and to whom it was sent ??

Why would a spurious email fool anyone ?

You'd hope so, but I can easily imagine people being confused initially and clicking the link cause it's quicker than opening a new browser and manually typing the URL. It only takes a moment's hesitation.

It would help if Outlook and web-based email accounts didn't display html emails, cause then the spoofed URL wouldn't trick people. But then people would moan about not seeing animated smileys and roll-over graphics properly in their emails

[Halcyon]

When you are bidding and selling often its very easy to forget who you were waiting payment from and for what item. So its easily done.