Home See the latest email Hoax and more copies of hoax email and hoax web pages or sites See our article on Account Hijacking for more about spoof email hoaxes, how to recognise one, what preventative measures to take and what to do if you've fallen victim to one REPORT SUMMARY Date Reported
2nd December 2003 Apparent Sender
eBay Subject
Update Seller
Account
Senders Address
(spoofed)
support@ebay.com
Content
text and a cloaked
link to a fake
eBay
web page
(see images)
Spoofed Web page/site?
Yes Web page/site
content
forged eBay web
page with web form
requiring eBay user
name & password,
credit, debit, bank
details, etc Web page/site origin
URL
http://
www.s1-
ebay.com/eBay.html Identity Theft method
Web form information
is captured and
relayed to the
scammers yahoo email address (laastavine@
yahoo.com)
using CGI script, while you
are sent to the
genuine eBay.com
home page
RESOURCES Try our free Auction Watcher! Worldwide Currency Converter Photographic Guide to Book Terminology including size codes, condition terms and common book defects How to recognise a first edition book List of Online Auction Sites around the World Resource Directory |
|
|
|
eBay
'Update Seller Account' spoof email hoax
2nd December 2003
This email is a spoof (as eBay would put it) and
is a scam which aims to relieve you of ...
.. your email address password, eBay user ID and
password, date of birth and credit/debit card details. The email takes
the common form of a 'security request' to 'update your seller account'
information together with a link to do just that.
The link that is provided
is cloaked (disguised) and it will take you to a fake eBay page which
contains a form for you to provide the information, as mentioned
above (see images below).
Whilst the web page URL should give away the mal-intent
of this scam, you could be forgiven for thinking that it is a genuine
eBay page since it is only 3 characters longer than the real ebay
domain name. Upon investigation however, s1-ebay.com turns
out to have been registered through, and hosted by, Yahoo.com. Why do
Yahoo allow their users to register these domains? Information entered
and submitted in that web form is sent to the scammers' Yahoo email address
(laastavine@yahoo.com) via a CGI script, whilst you are diverted to the
eBay.com home page, and most likely none the wiser. |
|
Stay
informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web
site. |
If
you have received this hoax email, please remember that it
is very common
for these email scams to be redistributed at a
later date with only slightly
different content or the same but with the fake page(s) hosted by a different
provider. Also, once you have received one of these hoaxes, it is also common
place to receive at least another one and usually a day or two
after the first, although not necessarily from the same apparent sender. Take a good look at the following images, because
this hoax email scam may be coming to an inbox near you! The Email ...
|