Date Reported 22nd February 2005
Apparent Sender eBay
Return Address aw-confirm@eBay.com
Subject We regret to inform you that your eBay account will be suspended
Format HTML
Method Spoof email links to a spoof webpage where victim is prompted to enter their details believing the site is genuine. Details are then forwarded to a local script and captured.
Bogus Web Content? Yes
URL of web content http://signin-cgi.info/eBayISAPI.dllSignIn&favoritenav=&sid=&ruproduct=&p
p=&co_partnerId=2&ru=&i1=&ruparams=&pageType=&pa2=&bshowgif=&pa
1=&pUserId=&errmsg=&UsingSSL=&runame=&siteid=0/
RISK LEVEL MEDIUM
WARNINGS 1. Email claims to be from eBay asking you to confirm your account data by clicking on the link. You will be taken to a spoof login page where your details will be captured by the phishers.
2. eBay never send users emails requesting details in this way.
3. URL of spoof website disguised as " http://cgi3.eBay.com/aw-cgi/eBayISAPI.dll?SecureConfirmation&bpuser=1 ".
4. Real URL a bit like eBay - do not be fooled!
5. Website traced to Bismarck, USA .
" We regret to inform you that your eBay account will be suspended due to the violation of our site policy below: "
If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.
|
