[mike777]

I have never been on EBAY so I know nothing about it.

I just got an email that got through my spam filter that looked very real from Ebay saying my bid was cancelled. It had footnotes, an EBAY logo and all sorts of stuff.

It did not ask me to do anything or for any information. I have no idea if this was real or a very clever piece of spam.

Does anyone on Ebay know about things like this?

[pbleighton]

If you google pieces of the text message, you may find that it's a scam (I don't know).

There is an existing PayPal scam, so watch out for that.

Peter

[sceptic]

just delete it, if it is fron ebay then no harm done, if it is a scam, the worse thing you can do is not delete

[barmar]

It's a phishing scam, designed to steal your eBay password. If you click on the links in the message it will take you to a web site that looks like eBay, but isn't. When you login to it, the scammers have your password.

Of course, this will only work for people who actually have eBay accounts. The scammers just shotgun the mail to everyone (just like spammers). If it gets to people without eBay accounts, they don't care.

Since you haven't used eBay, how could you possibly think that it was real? It's just like the mail that comes from PayPal or web banking sites, warning you that your account has been compromised and you need to login to prevent it from being suspended. These are all scams. None of these types of services will ever send you mail like this.

[luke warm]

forward it to 'spoof@ebay.com' and they'll track it down

[helene_t]

barmar, on Jun 27 2007, 09:33 AM, said:

It's a phishing scam, designed to steal your eBay password. If you click on the links in the message it will take you to a web site that looks like eBay, but isn't. When you login to it, the scammers have your password.

That's right, I got such a fishing attack from an eBay scam as well.

[csdenmark]

mike777, on Jun 27 2007, 01:19 AM, said:

I have never been on EBAY so I know nothing about it.

I just got an email that got through my spam filter that looked very real from Ebay saying my bid was cancelled. It had footnotes, an EBAY logo and all sorts of stuff.

It did not ask me to do anything or for any information. I have no idea if this was real or a very clever piece of spam.

Does anyone on Ebay know about things like this?

Mike your computer is now in serious danger.

As the mail didn't ask you to do anything the only purpose was to download malicious code to your computer for stealing passwords.

Don't login to your bankaccount or any other important site using password until you have cleaned your computer.

Contact your bank immediately and block your account until you are sure your computer has been cleaned.

See to your passwords will be changed immediately.

Try to run a special scan of your computer and see if it finds anything.

The secure way of course is to format your harddrive and I think it is the only secure way for you.

Ebay knows all about that - it is in fact one of the topics most important to them. Their whole business is based on security. Never enter anything to Ebay or Paypal unless your 'account guard' has confirmed you are on a verified Ebay site. All info will then be forwarded in encrypted mode.

Ebay and Paypal never ask for anything via ordinary mail. They only mail members and you can see in text without the need to open that your Ebay name is included in the text.

[helene_t]

csdenmark, on Jun 28 2007, 01:24 AM, said:

Mike your computer is now in serious danger.

As the mail didn't ask you to do anything the only purpose was to download malicious code to your computer for stealing passwords.

Don't login to your bankaccount or any other important site using password until you have cleaned your computer.

Contact your bank immediately and block your account until you are sure your computer has been cleaned.

Really? Unless there is some bug in Mike's mail program, the mail he received should not be able to execute any malware attached to it. Probably the phishing attack works by containing a link to the scam site, hoping that some receipents will click on the link and give their password away there. Even if it contains an image which resides on the malware server and some bug in Mike's email client allows the image to submit cookies to the malware server (I think that bug has been patched years ago in all commonly used email clients but you never know), probably Mike's passwords, bank account number etc. is not to be found in cookies.

[luke warm]

yes, most of those scams require you to log on to something so they can capture the keystrokes... i send them to spoof@ automatically, same for paypal