New Phish - Warning

Web | 2/1/06

[pabianice]

Got a new, sophisticated phish yesterday:

===========================================

eBay sent this message!

Your registered name is included to show this message originated from eBay. Learn more.

Question from eBay Member -- Respond Now

eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will not reach the eBay member. Use the Respond Now button below to respond to this message.

Question from user

We are contacting you about the following item: Toshiba rd-xs54 dvd Recorder w 250 gig hard drive (#5856334211)

The seller, lkaroll tells us you have mutually agreed not to complete the transaction (e.g. because you returned or are returning the item for a refund or because there was a misunderstanding) and has requested a credit for their eBay fees.

Please respond by 28-Feb-2006 so eBay knows whether you have agreed.

Best Regards.

Respond to this question in My Messages.

Thank you for using eBay http://www.ebay.com/

=================================================

Clicking on the mail brings you to a page that looks like the ebay sign-in page, asking you for your member ID and password. However, when you enter your password, the page does not, as usual, finish entering it and then automatically enter your password asa is the case with ebay. Strange. I hesitated.

I did not remember buying or bidding on this item. A check of the entire header using "options" revealed the following header:

Return-Path: pwrchute@pslx.org Received: from mxsf22.cluster1.charter.net ([10.20.201.222]) by mtai02.charter.net (InterMail vM.6.01.05.04 201-2131-123-105-20051025) with ESMTP id 20060131234749.MTFY24101.mtai02.charter.net@mxsf22.cluster1.charter.net for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from mxip11a.cluster1.charter.net (mxip11a.cluster1.charter.net [209.225.28.141]) by mxsf22.cluster1.charter.net (8.12.11/8.12.11) with ESMTP id k0VNlhhH007670 for ; Tue, 31 Jan 2006 18:47:49 -0500 Received: from www.pslx.org (HELO pslx.org) (202.32.143.132) by mxip11a.cluster1.charter.net with SMTP; 31 Jan 2006 18:47:39 -0500 X-IronPort-AV: i="4.01,242,1136178000"; d="scan'208"; a="2085161982:sNHT49858556" Received: (qmail 26983 invoked by uid 518); 1 Feb 2006 09:04:50 +0900 Date: 1 Feb 2006 09:04:50 +0900 Message-ID: 20060201000450.26980.qmail@pslx.org To: Subject: Message from eBay Member From: "member@ebay.com" member@ebay.com Content-Type: text/html

This definitely does not look like a real message from ebay.

Beware.

[Oatka]

Another eBay/PayPal phish is to send you a message that your PayPal account has been charged $351.55 for a watch (in this case) and that if you aren't the winner, click here (ahem) to back out the funds. They even give you the seller's address (which, according to MapQuest, turns out to be phoney).

I guess they depend upon your outrage, and the oddball amount, to immediately "clear up" the situation.

[dmz]

You should know better than to use chronic_loser's lines, doncha think? She might get angry even though she has been banned or suspended. She might still be lurking. Or even posting under another name.

LOL. Have a nice day.

[When_Penguins_Attack]

huh? Humor has to be understood to be funny. Are you comparing me to some other poster or something? Did she insult you and get your panties in a wad? Should I send her flowers?

This is a weird little community you people have for yourselves here.

[dmz]

The door is thataway ...

[When_Penguins_Attack]

The door is thataway ...

and my butt is on top of my legs. If you need further invitation on puckering up, you might try freepmailing me (again!). I am out of this thread, but I have certainly enjoyed it. All the best.

[ARealMothersSonForever]

sniff......

[MikefromOhio]

I am not offended at all. I like playing with trolls. Here's a hint for one. Don't get into a battle of wits. You are clearly unarmed.

that was SOOOOOO original

[CollegeRepublican]

This is a weird little community you people have for yourselves here.

There is nothing weird about common courtesy and manners. And what do you mean "you people"? Are you not drinking the kool-aid like the rest of us? /sarcasm

[When_Penguins_Attack]

There is nothing weird about common courtesy and manners.

I don't mind courtesy and manners. I think all the unwashed rabble should display them.

And what do you mean "you people"?

DMZ and all the voices in my head. Why? You want to invite others to this spitfest?

Are you not drinking the kool-aid like the rest of us?

by the gallon! It is so nice to feel loved and welcomed. Almost like my first 13 foster homes.

[Darksheare]

"I think all the unwashed rabble should display them."

Apparently excluding you of course.

"You want to invite others to this spitfest?"

See?
Excluding you.

"It is so nice to feel loved and welcomed. Almost like my first 13 foster homes."

Yup, definitely excluding you.

[Doohickey]

I plan on being the last person in America to get an eBay account, but yours is a ridiculous statement. To each his own. There's nothing inherently wrong with eBay. I wish I'd have thought of it.

[RightWhale]

I have gotten similar messages pretending to be amazon.com. Should they be reported to Homeland Security or to the FBI?

[July 4th]

[Always Right]

I have gotten two from Paypal in the last week that have cloned the paypal site. Never trust a link in the e-mail. Usually the site that it links to gives it away.

[Always Right]

Unauthorized access to your PayPal account!


We recently noticed more attempts to log in to your PayPal account from a foreign IP address.

If you accessed your account while traveling, the unusual log in attempts may have been initiated by you. However, if you are the rightfull holder of the account, please visit Paypal as soon as possible to verify your identity:
Click here to verify your account






You can also verify your account by logging into your PayPal account at https://www.paypal.com/us/.

If you choose to ignore our request, you leave us no choise but to temporaly suspend your account.

We ask that you allow at least 72 hours for the case to be investigated and we strongly recommend to verify your account in that time.

Thank you for using PayPal!
The PayPal Team

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.

To receive email notifications in plain text instead of HTML, update your preferences here.



PayPal Email ID PP468

[birbear]

Anyone who uses or goes to e-bay or anyother such should be confined for observation.

You don't get out much do you?

Or are you one of the jealous ones that hates seeing people make a LOT of money?

[don-o]

ping

Read and heed

[sleddogs]

I have personally done over 870 transactions via Ebay over the past 2 years. I started buying telecom equipment for my business. Now I buy most everything there. Recently bought a 1996 Old 98 for the wife with 60k original miles, got it for $3500.00 sweet deal and the 91-96 Olds 98's get 30 MPG. For some of us Ebay is the perfect way to do business. And finding extremely hard to find parts is a cinch. I have bought parts from Italy, England, Australia, China, Taiwan, Hong Kong, France. Phishing is a problem in many places, I have got them from all the major credit card companies and a couple insurance companies. Always report it and never respond to an email. If you think it may be real contact the said company directly whether by emailing there site directly or by phone.

[_Jim]

GREAT place to find all manner of odds and ends and rare and exotic (electronic) components through to 'systems' scale items.

As others have pointed out, ONE has to use common sense and SHOULD be quite familiar with WHAT it is they are dealing in (one should be familiar with the technology AND the terminology). The devil CAN be in the details, to be sure.

Armed to the hilt with specific knowledge of the item-area one deals in, one can do okay 'trading' on eBay. Sort of a largish, nation-wide garage sale sort of affair if you will ...

[_Jim]

I was 'phished' the other day - with a VERY authentic looking "Second Chance Offer".

Only glitchs:

1) NO link back to eBay for the reqisite "Buy it now" link

2) NO appeareance of the 'offer' appearing in "MyMessages" on eBay

3) The sender wanted direct response to the e-mail at a yahoo.com account.

4) The sender/response address bore NO resemblance to the sellers name or ID on eBay.

5) Bad English, but only slightly so, in the "Second Chance Offer"; close examination showed enough mistakes to raise suspicians (those scammers REALLY need to hire some grammatical help!)

A quick note to the original seller of the item on ebay confirmed my suspicians; he was glad to have been informed of the 'phish' attempt.

I also sent the e-mail and e-mail headers to spam@eBay.com per standard recommended procedure on eBay's site.