eBay Security Test Check Up !!! - Email Phishing Scam
5th January 2004

This eBay Security Check Up is a scam ...

This spoof email phishing scam takes the form of a fake eBay sign in page (see image below).

The email is very brief, with the bold, red statement that 'this is 'a security check up' and a short 'sign in' form requiring user name and password. Once that information is in hte hands of the scammers, you can expect them to hijack the account. Hijacked eBay accounts have commonly been used to list high value consumer goods (such as digital cameras and televisions) which attract buyers who pay but never receive the goods.

We found that the code behind the email uses a CGI scripted form to mail processing service provided by win.net which sends the user name and password onto a Yahoo email address (herghelie@ yahoo.com).

If you have received this hoax email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

Take a good look at the following image, because this hoax email scam may be coming to an inbox near you!

The Email ...