REPORT SUMMARY
Date Reported
16th December 2003
Apparent Sender
eBay
Subject
Verify Your eBay
Account
Senders Address
(spoofed)
Various
Content
text and a
file attachment
Spoofed Web page/site?
Yes
(created by
opening
the file
attachment)
Web page/site
content
forged eBay
page opens in a window with form
requiring
name & address, Credit Card, Bank
and Paypal Account
details, etc
Web page/site origin
URL
N/A
Identity Theft method
Form information
is captured and
relayed to the
scammers
More...
Latest
phishing
scam
See our guide to
phishing scams
Other
Resources...
See our guides to
Free Utilities...
List of
Auction Sites
Verify
Your eBay Account Email Scam with W32.HLLW.Cayam Worm Virus Attachment
20th December 2003
In the wake of the Paypal Mimail Virus Scam comes the eBay W32.HHLW.Cayam@mm Worm ...
Reports of this eBay scam are growing rapidly now, and it comes on the form of a spoof eBay email with an attachment named eBayVerify.exe (see email text below). Its been a while since the last eBay mass mailing worm virus (W32.Fishlet.A@mm) back in June 2002, and this new email is just as nasty.
This email is yet another Email Phishing Scam. Phishing is a term used to describe the forged emails and web pages which aim to convince users to enter personal data for the purpose of Identity Theft.
The attachment is not a really program to ensure your continued use of your eBay account at all, it is actually the W32.HLLW.Cayam@mm worm virus which is programmed to open a forged eBay web page in a window. This page is crafted to appear to be genuine a eBay page, and which requests your bank, credit or debit card and Paypal Account data.
Once this malicious attachment is activated (normally just by opening it), it spreads itself further by using your Microsoft Outlook Address Book. The worm virus has also been known to spread through the peer to peer file sharing Emule and Kazaa programs.
Stay informed of the latest Spoof Email Phishing Scams with either of our FREE alert services...
Email
Alerts
Add your email address to our email alert service...
Subscribe
Privacy Policy
RSS
News Feed
Tap into our Scam Alert service using your News Reader or Aggregator (including
My Yahoo!).
Scam Alert News Feed
You can even put the latest alerts on your own web site.
If you have fallen for this scam
please follow our guidelines on what to do now
FORWARD
YOUR EMAIL SCAMS
TO KU.OC.SELIMSRELLIM@FOOPS
and help us to
build awareness and
help others
If
you receive this email - forward a copy to us, delete it and
then empty your deleted items folder. Further information is available
from Symantec together with removal instructions in case of infection
here.
If you have received this hoax email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
Take a good look at the following, because this email scam may be coming to an inbox near you soon!
The Email ...
Dear Ebay user,
Dear valued eBay member, It has come to our
attention that your eBay Billing Information
records are out of date. That requires you to
update the Billing Information If you could
please take 5-10 minutes out of your online
experience and update your billing records,
you will not run into any future problems
with eBay's online service. However, failure
to update your records will result in account
termination. Please update your records in
maximum 24 hours. Once you have updated your
account records, your eBay session will not
be interrupted and will continue as normal.
Failure to update will result in cancellation
of service, Terms of Service (TOS) violations
or future billing problems.
Please open attachment to update your billing
records.
Thank you for your time!
Marry Kimmel,
Also see our brief guide to Phishing
