WARNING TO ALL EBAY AND PAYPAL USERS!!!

19 replies [Last post]
(HK) FUSSION
NeOFrAg's picture
Offline
Joined: Dec 2005
Posts:

This is a warning to all of you who use ebay and paypal. My wife and I were recently a victim of identity theft due to a spoof ebay and paypal email. If you get an email in your normal email inbox check your ebay "My Messages" inbox first to make sure that the same message is there as well. If not, then it is a false email and you need to forward it to ebay at . It is someone trying to get your personal banking and credit card information. Now we have to close all of our bank accounts and start over. Please be aware of your emails (especially during the holiday season) which I'm sure most of you are.

Happy Holidays.

NEOFRAG[W*I*N*G]

A great clan is not measured by how many wins it has... but by the character, poise and sportsmanship of it's members.

(HK) GoddaM wrote:

pwning pros, playing ho's and loving bros. HK to the core.

Arax'KG
ar4xis's picture
Offline
Joined: Feb 2006
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

Ouch..
Thanks for telling us, too bad that it happened to you Confused

EVOL.WAX
Forum moderator
WAX's picture
Offline
Joined: Jun 2004
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

yes thanks for sharing the info !

EVOL.LEE
Kiliyo's picture
Offline
Joined: Aug 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

Man that sucks, they stole any money from you or what?
Hope your post will help some people prevent shit from happening Big grin .

EVOL.IZNOGOUD
Iznogoud's picture
Offline
Joined: Mar 2004
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

Monkeys armpit!
So I wont get my Viagra for the holidays?!

Sorry for making a joke...

Thanks for sharing

Bättre pissa i stuprännan än stupa i pissrännan !

(HK) FUSSION
NeOFrAg's picture
Offline
Joined: Dec 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

no, no money was taken (yet Shock ). I think we caught it in time before they could do anything so lets hope! Happy

A great clan is not measured by how many wins it has... but by the character, poise and sportsmanship of it's members.

(HK) GoddaM wrote:

pwning pros, playing ho's and loving bros. HK to the core.

D
Dementor's picture
Offline
Joined: Feb 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

Thnx for the usefull info man !

Cheers Winking

RATSALAD
ratsalad's picture
Offline
Joined: Dec 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

These "phishing" scams are very common. One of my specialties over the last ten years has a been security. Unix server security mostly, but have also become somewhat educated about things such as this as well.

So here's some tips for everyone concerned by this, and aren't educated about the issue.

1. Ebay and Paypal *always* greet you by at least your first name, Payal greets with full name, I think. Dear John... Dear John Doe... etc. If it does not say your name as I describe it is NOT from Ebay or Paypal... However, I did get one phishing scam that did greet me by name (only one so far that has).

2. Read the message carefully... pay attention to grammar and spelling. If either or both are poor, 99.9% chance it's not really from Ebay or Paypal.

3. In whatever you use to read your e-mail, usually you can hold your mouse over a link and look in the lower left hand corner of the application status bar it showed where the link goes. Look at the address very carefully... if it doesn't say cgi.ebay.com or paypal.com well... it's not from them Happy But like I said look very carefully because they could have a similar domain name as Paypal and Ebay to try to fool you.

4. There are also addons for Netscape/Mozilla/Firefox that will try to detect phishing sites... and for you Windows fellas that don't use Firefox, I *think* there's phishing scam detection built into the new Internet Explorer 7.

Another thing... I really don't think Paypal or Ebay ever ask you to update your information.

RATSALAD
ratsalad's picture
Offline
Joined: Dec 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!

Sorry for double posting.. but I think this would be more effective than editing my existing post.

I just got a couple of phishing scams that show off some of things I mentioned.

First the one claiming to be from Paypal..

[code:1]
Dear PayPal Member,
PayPal is committed to maintaining a safe environment for its community of buyers and sellers. To protect the security of your account, we employ the most advanced security systems in the world and regularly screen our system for unusual activity.

Recently, our Account Review Team identified some unusual activity in your account. Per PayPal's user agreement, we have limited access to your account until this issue has been resolved. This is a fraud prevention measure meant to ensure that your account is not compromised.

In order to secure your account and quickly restore full access, we require some specific information from you.

Login follow our secure site and update all necessary informations to your account.

http://paypal.com.cgi-bin.websct.us/cmd/webscr.php?cmd=_login-run

Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account. We apologize for any inconvenience.

Sincerely,
PayPal Account Review Department.
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.
PayPal Email ID PP8790
Copyright© 2006, PayPal Inc., All rights reserved. Designated trademarks and brands are the property of their respective owners.
[/code:1]

First clue... "Dear Paypal Member," were this really from Paypal it would have read "Dear Jeremy Workman,"

Second clue... http://paypal.com.cgi-bin.websct.us/cmd/webscr.php?cmd=_login-run <-- notice something funny about that? Okay, yeah... it does say paypal.com, but carefully read on... paypal.com.cg-bin.websct.us... etc... paypal.com.cgi-bin here is actually a sub-domain of the domain websct.us Happy They're hoping your eyes play tricks on you, and you don't notice the dots that should be forward slashes.

Now the Ebay spoof...

[code:1]
eBay Unpaid Item Strike Received: #260045256839

You have received an Unpaid Item strike
You were the winning buyer on eBay item #260045256839 .The seller, has informed eBay that payment for the item has still not been received, or that the two of you were not able to come to agreement. As a result, you have received an Unpaid Item strike.

Remember, Unpaid Item strikes may result in your suspension from eBay.

You can appeal this Unpaid Item strike if you believe it is not deserved. First, read the requirements for appealing the strike. If you meet them, you can submit your appeal on that page. If your appeal is successful the strike will be removed.

If you have recently paid for the item number listed below or do you feel it to be a mistake, you must Remove the Unpaid Item Strike Now.

Regards,
The eBay Team
[/code:1]

Gee, not even a Dear Ebay Member, with this one Laughing That's a dead giveaway, other than the fact I haven't bought anything on Ebay in months Tongue

Amazingly the spelling and grammar is alright in both of these Shock ... Educated thieves, oh my!

.
Offline
Joined: May 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!
RATSALAD wrote:


4. There are also addons for Netscape/Mozilla/Firefox that will try to detect phishing sites... and for you Windows fellas that don't use Firefox, I *think* there's phishing scam detection built into the new Internet Explorer 7.

It is supported but I still wouldnt recommend IE over firefox to anyone.

Firefox all the way,stay away from IE.The biggest security tip u can get.

RATSALAD
ratsalad's picture
Offline
Joined: Dec 2005
Posts:
WARNING TO ALL EBAY AND PAYPAL USERS!!!
. wrote:

RATSALAD wrote:

4. There are also addons for Netscape/Mozilla/Firefox that will try to detect phishing sites... and for you Windows fellas that don't use Firefox, I *think* there's phishing scam detection built into the new Internet Explorer 7.

It is supported but I still wouldnt recommend IE over firefox to anyone.

Firefox all the way,stay away from IE.The biggest security tip u can get.

I agree with you 100% Ratz... I just know there's some people who refuse to believe the dangers of using IE and Outlook. I wouldn't recommend IE or Outlook to anyone Happy This isn't to say holes aren't in Firefox, there are... but I guarantee they're fixed faster than things discovered in IE.