posted on October 5, 2002 02:22:29 PM new
Did anyone receive an email from "ebay" today with the subject of "Security Check"? I did, and when I clicked on the email, it gave me eBay's sign-in screen. It looked just like the sign-in screen that eBay has on their page. Well I inputted my userID and Password, and then it said, "Operation Successful", and that was it! The thing that made me suspicious is that "successful" was spelled incorrectly. I emailed eBay and they said they probably did not send it! So I immediately went into my eBay account and changed my Password. Did anyone else receive this Email Scam and/or have you heard of any horror stories of people getting your UserID and Password and doing things to your account? (I'm afraid to ask!)
posted on October 6, 2002 10:29:27 PM new
The URL was directed back at eBay, however I'm pretty sure it was a scam. Has anyone else received this "Security Check" email that's supposedly from eBay??
posted on October 11, 2002 12:57:04 AM new
I have received more than one email that seems to come from ebay, but doesn't. I reported them to ebay and here is what I learned:
These emails are commonly called "spoofs." What they do is try and get you to click a link or enter info into popups, info like your id, password etc.
WHATEVER YOU DO, DO NOT USE THE LINKS OR ENTER YOUR PERSONAL INFO!!!
What these email links do it open up a "shadow site" that looks almost identical to the real site. In your case, the boxes that poped up were probably shadow boxes.
Once you click the link, the shadow site can monitor every keystroke you make!!! They take down info like passwords, online bank accounts, etc. Once they have the info, you are in real trouble!!!!
The reason they are called "spoofs" refers to how they make the email look like it comes from someone else.
If you go to the message source of the email you may notice that the return path which should be the same email that sent it to you, is different. The email that I received came from ebay announcements, yet when I checked the source, this is what the source code said "Return-Path: <[email protected]>" which redirected any replies to somewhere else. All links in the email were attempts to obtain personal information.
I always check the message source, since the emails look just like ebay emails.
My new rule of thumb: Never open attachments, and NEVER use links in an email
posted on October 11, 2002 05:23:36 AM new
kellyb1
If what you say is the case, and I have no reason to believe otherwise, then changing user info is not going to solve the whole problem. If they put "Spyware" on your computer to monitor your keystrokes, wouldn't you have to reformat the drive or at least use some sort of "cleaning" program to get rid of the "Spyware"?
posted on October 11, 2002 05:29:58 AM new
slhsato... This happened to me about 6 months back and if you entered any data in the popup screen... CHANGE YOUR EBAY PASSWORD IMMEDIATELY! These guys try to steal your identity and if they change your password before you do .... YOU WILL BE LOCKED OUT. It is better safe than sorry.
