New (to me) variant of fake Ebay email scam

Ferguson · 7th December 2005, 09:47 PM

I'm sure most of you folks have seen the fake emails from Ebay that are "phishing" for your username and password. I get several from ebay, paypal and various banks everyday. But I got one today that darn near fooled me. It was what looked like a message from an ebay member. They were asking why I had bid on an auction and hadn't paid for it. They mentioned negative feedback if I didn't respond. I've won several small auctions lately and wondered if I had made a mistake. I mean this thing looked absolutely real.

So I clicked on the link to the auction and up popped an ebay login screen. Screech!!! My mind finally clunked in gear and I didn't type anything. Noticed the URL and it wasn't Ebay. Dayum. That one just about got me, and I'm about the most suspicious and cautious computer user out there. I do the security for our network for goodness sake. The bastids almost got me this time. Forwarded the email to spoof@ebay.com and got a slightly different response from normal saying that these emails often contain a keystroke logger virus. Fortunately this one didn't. So if you get an email from an ebay member that you aren't expecting, check your messages on Ebay itself to see if it's legit.

Steve

7th December 2005, 09:47 PM	#1
Ferguson Member Join Date: Dec 2004 Location: Kernersville, NC, USA Posts: 793	New (to me) variant of fake Ebay email scam I'm sure most of you folks have seen the fake emails from Ebay that are "phishing" for your username and password. I get several from ebay, paypal and various banks everyday. But I got one today that darn near fooled me. It was what looked like a message from an ebay member. They were asking why I had bid on an auction and hadn't paid for it. They mentioned negative feedback if I didn't respond. I've won several small auctions lately and wondered if I had made a mistake. I mean this thing looked absolutely real. So I clicked on the link to the auction and up popped an ebay login screen. Screech!!! My mind finally clunked in gear and I didn't type anything. Noticed the URL and it wasn't Ebay. Dayum. That one just about got me, and I'm about the most suspicious and cautious computer user out there. I do the security for our network for goodness sake. The bastids almost got me this time. Forwarded the email to spoof@ebay.com and got a slightly different response from normal saying that these emails often contain a keystroke logger virus. Fortunately this one didn't. So if you get an email from an ebay member that you aren't expecting, check your messages on Ebay itself to see if it's legit. Steve