Search our Spoof Library...
Another Spoof Email and Phishing Scam report by MillerSmiles.co.uk - click this image to go to our home page.

eBay - Question for Seller Item #515562586 - Spoof Email Phishing Scam
3rd March 2004

please forward any scams you've received to spoof@millersmiles.co.uk

 

Report Summary
Date Reported
3rd March 2004
Apparent Sender
eBay
Return Address
multiple addresses in use
Subject
Question for seller -- Item #515562586
Format
HTML
Method
disguised link leads to non ebay page which downloads trojan
Bogus Web Content?
Yes
URL of web content
http://66.169.74.16:9092/.........
RISK LEVEL
Medium
WARNINGS

1. Scripted to open a bogus eBay page automatically when you view the message (without using the link).
2. Bogus web page is scripted to commence download of trojan.

This 'Question for Seller' email is a spoof which is scripted to automatically open a bogus eBay page which is further scripted to download a Trojan prgram to your computer...

This spoof eBay email (see image below) is in HTML format (although it does look like a text only email in order add a sense of authenticity to the link text). The email is scripted to open a bogus eBay page in your browser as soon as you view it (whether in your email program's preview pane or by opening it). The link in the email has been disguised using HTML code to look like a genuine link to eBay and is there just in case you have scripting disabled.

The bogus eBay web page simply states that an item does not exist, but the page is scripted to trigger the download of a Download.Trojan - a trojan program which is programmed to download further Trojans, viruses, worms, or their components. More information on the trojan can be found here.

There is no attempt at phishing in this bogus web page, but what kind of trojans could further be involved, we cannot determine at this time. This particular trojan program was originally identified in 2001, so your anti-virus software should recognise and delete or contain it with no problems.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

The Spoof Email ...

 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
 

Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...

Email Alerts
Add your email address to our email alert service...
Subscribe

Privacy Policy

RSS News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including My Yahoo!).
Scam Alert News Feed

You can even put the latest alerts on your own web site.

Click here to learn more about RSS News Feeds and our Scam Alert Service!

Resources links - use one of the links below to access more information on Spoof Email & Phishing Scams.

Library of Spoof Email Phishing Scams

Brief guide to Phishing

Full article on spoof email scams

Spoof URL Checker

Link Checker

Browser URL Spoofing Vulnerability Check

Latest browser bug aids Phishing Scams - beware!

Destinations - other resources available on the MillerSmiles.co.uk web site.

Click the arrow to return to previous page

Home

Guides...

Book Terminology

How to identify a first edition book

Auction Watcher

List of the main Auction Sites world wide