PDA

View Full Version : Emails from Ebay


Cruciform
04-18-04, 10:46 PM
disclaimer: techies or old-school netheads can skip this :)

Since virii or fraud schemes tend to go out in massive email bombs to millions of accounts at once, I'm guessing that at least a couple of people received an email tonight from eBay asking you to update your user info or credit card information.

Don't click on the link provided, and don't fill in any info -- not even the login info.

A fraudulent site called SecureUpdates.com has a fake eBay signin page, that is designed to steal your user name and password, then let you "update" your credit card info.

When you input a user name and password on the page, it doesn't actually check it against anything. It just saves the info you provided, so they can use it later to make bids on items using your reputation. If you've got a good rep they'll order things like laptops, rip off the seller, and you find out about it later when eBay or the police contact you.

This site takes it one step further. After signing in, it takes you to a credit card update page, in order to steal that info as well.

If you ever receive emails from sites like ebay and paypal or your bank requesting that you update user info, never click on the link, but type in the full URL (web address) that you use to visit the site normally. There are lots of tricks for disguising domain names in browsers so they're not easily deciphered, so when dealing with any personal info type in the address or use your favorites/bookmarks.

If this keeps anyone who is new to the net (and some of the schemes going on out there) from getting ripped off, then yay! :)

latazyo
04-19-04, 10:51 AM
there's a paypal one too...don't be fooled

Cruciform
04-19-04, 10:55 AM
Yup, I mentioned that near the end.

A couple of months ago I got one purporting to be from Fleet Bank. The site layout was duplicated, and virtually all the content was actually sourced on the Fleet website. The login and password section were on the fraudsters server of course.

Fleet ignored the report, and the FBI responded that they were forwarding it to their agent in charge of computer crime reports. No idea if anything happened. Probably not, as the fake server was located in China.