Paypal Spoof NB

[PhilF]

Bit tipsy last night and was looking at my e mails. One was from paypal asking me to log on and update some details. I did as well. Managed to change password as soon as I realised I was being a twat.
Really looked like paypal too - beware
Philf /forums/images/graemlins/blush.gif

 

[Talbot]

You can only be semi-safe if you work on the assumption that any email that asks for account details will always be a con attempt. /forums/images/graemlins/frown.gif

 

[PhilF]

it didnt, there was a link to a site that looked like paypal

 

[l'escargot]

Paypal etc will address you by name, the phishers generally address you as "Dear (Company Name) Customer". Information on Paypal and most internet banking sites.

 

[duncan]

Here's a new one fresh from my inbox!

Dear eBay member


We recently noticed more attempts to log in to your eBay account from a
foreign IP address and we have reasons to belive that your account was compromised
by a third party without your authorization.

If you recently accessed your account while traveling,the unusual log in attempts
may have been initiated by you.
However,if you are the account holder please verify that, clicking on the link below,
fill the form and then submit. In this way we will verify your identity.

http://signin.ebay.com//aw-cgi/eBayISAPI.dll?VerifyIdentity&ssPageName

The log in attempt was made from:
IP address: deleted
ISP host: deleted

If you choose to ignore our request , your account will be suspended until you will verify your identity
.

We ask that you allow at least 72 hours for the case to be investigated and we
strongly recommend not to make any changes to your account in that time.

If you received this notice and you are not the authorized account
holder, please be aware that it is in violation of eBay policy to represent
oneself as another eBay user. Such action may also be in violation of
local, national, and/or international law. eBay is committed to assist
law enforcement with any inquires related to attempts to misappropriate
personal information with the intent to commit fraud or theft.
Information will be provided at the request of law enforcement agencies to
ensure that perpetrators are prosecuted to the fullest extent of the law.

*Please do not respond to this e-mail as your reply will not be received.

Thanks for your patience as we work together to protect your account.


Regards,

Safeharbor Department
eBay Inc.

A good practical example of the tips given above.

 

[MikeBrazier]

If you look at the actual message body from that message you will find that although the link shown looks like it points to an ebay server it actually points directly to an IP address which is based somewhere in Asia. The scam email originates from a Hotmail account.

I had the same message and did some investigation. The worrying thing was that Ebay, after reporting the issue to them were not overly concerned. I assume that as the scam does not use there system they would not be liable. I was concerned about where the scammers had got sufficient account information from to contact me, they couldn't answer.

Although I didn't follow the link myself, I would be concerned if I had as the page linked to in the email could have installed spyware or similar.

Mike.

 

[duncan]

pretty much as I read it Mike

I also share what I think is your undertone too - we have reached a stage in the use of online services where so off the big boys have forgotten that there are many many 'newbies' and are making massive assumptions about the levels of understanding out there.
eBay in particular seems to consider itself above everything....

 

[FullCircle]

There is a little program toolbar for IE called SpoofStick. Its freeware, and tells you what domain you are ACTUALLY on. There is also some software info at Spywareinfo.com which gives another warning about scam ebay site identification.