REPORT
SUMMARY Date Reported
14th January 2004 Apparent Sender
eBay Subject
eBay Account
Verification Senders Address
(spoofed)
aw-confirm@
ebay.com Content
text with a cloaked
link to a forged
eBay web page
(see images) Spoofed Web page/site?
Yes Web page/site
content
forged eBay web
page with web form
requiring eBay &
Paypal usernames
& passwords,
name & address
details, credit or
debit card and bank
details, etc Web page/site origin
URL
http://
www.mhg2k.com/
gccVerify/index.php Identity Theft method
Web form
information
is captured using
MailBomber
script More... HOME Latest
email
scam See our guide to
phishing scams Other
Resources... See our guides to 1st
Edition Books Book Terminology Free Utilities... Worldwide
Currency
Converter Auction
Watcher List of
Auction Sites |
|
|
|
eBay Account Verification - Email Scam
14th January 2004
Is this really a periodic account review? -
Not this time, its a scam ...
This email
takes the form of a text message with a link (see image below),
but the is disguised (cloaked) to look like it will take you to http://www.ebay.com/...
However, using that link will open a forged page with the following URL
(site address in your browser address bar) ...
http://www.mhg2k.com/gccVerify/index.php
This address resolves to Yahoo web space, and is therefore
nothing to do with eBay at all. We also found that the page uses a MailBomber
script to capture the data entered and submitted into this fake form.
If you have received this email, please remember that
it is very common for these email scams to be redistributed at a later
date with only slightly different content or the same but with the fake
page(s) hosted by a different provider. Also, once you have received
one of these hoaxes, it is also common place to receive at least another
one and usually a day or two after the first, although not necessarily
from the same apparent sender. |
|
Stay
informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web
site. |