Jump to content

The Latest eBat Identity theft scam !


NOSValves

Recommended Posts

Recieved this in my In box this morning the scams never end !

Dear eBay member,

We recently noticed one or more attempts to log in to your eBay account from a foreign IP address and we have reasons to believe that your account was used by a third party without your authorization. If you recently accessed your account while traveling, the unusual login attempts may have been initiated by you.

The login attempt was made from:

IP address: 68.190.191.68

ISP Host: 68-190-191-68.slt-cres.charterpipeline.net

By now, we used many techniques to verify the accuracy of the information our users provide us when they register on the Site. However, because user verification on the Internet is difficult, eBay cannot and does not confirm each user's purported identity. Thus, we have established an offline verification system o help you evaluate with who you are dealing with. The system is called ebay PowerSafe and it's the most secure eBay wallet so far.

If you are the rightful holder of the account, click on the link below, fill the form and then submit as we will verify your identity and register you to ebay PowerSafe.

Register with eBay PowerSafe

To make eBay.com the most secure site to place or bid on your auctions,every user will be registered to PowerSafe.

If you choose to ignore our request, you leave us no choice but to temporally suspend your account.

* Please do not respond to this e-mail as your reply will not be received.

Regards, eBay Inc.

Link to comment
Share on other sites

They get better each time dont they. On occasion - when I have really not been sure whether it is real or not I go directly to ebay (not following the provided link), login, and see if there are any messages or instructions relating to the email.

If not I do nothing.

I wonder if my account still works

Link to comment
Share on other sites

Yea right! When receiving any email from paypal, eBay or whatever I always right click and properties to see where it originates from and sure enough if you look through it closely you will always find something strange. This is another classic example of why people need to be ultra careful and research every relationship that they form on the internet whether on a public forum or through email. Anyone can be anything behind a keyboard.

Craig

Link to comment
Share on other sites

Another thing to keep in mind. Every once in a while, I do get a legitamate e-mail from eBay or PayPal (for example, I had an e-mail from PayPal talling me my credit card I use with my account was about to expire).

Every single time, they tell me to simply log into my own account using my own username and password and update the information there. Never, have they provided a link to some form asking for everything and anything about me. Just telling me to log into my account and update the information there.

Anything that asks you to fill in some form and submit it, is highly suspect, regardless from whom it is. The legitimate e-mails from these services just simply want you to log into your account and update it.

Also, check the url displayed in the address box in your browser. If it does not start with "https//", that is also a good bet it is not legitimate.

As somebody already mentioned, contact eBay directly, perhaps with a copy of the message attached to your e-mail and ask them if this is legit. More than likely, it is not. NOSValve, I would report this to eBay proper.

Link to comment
Share on other sites

if I have trouble finding the strangeness viewing the source of the email.

???????????

Max and Steve gave the right advise. When in doubt, delete. And have a good firewall, virus protection, spyware protection and adware protection. Even on Yahoo with spamguard spam happens.

Rick

Link to comment
Share on other sites

Nos,

Your 'registration button' belongs to this company. Perhaps folks would like to drop them a line and ask a few questions.

Organization:

CashMaster Business Systems, Inc.

Marilyn Kyd

15009 8th Place West

Lynnwood, WA 98037

US

Phone: 425-742-7120

Fax..: 425-742-2897

Email: marilyn@MomThoughts.com

It is also interesting to know if you drop off the 'validate.php from url from the ip address you get a whole different site from this server which bears no resemblence to ebay.

For further giggles, the site was designed by some guys called com-pro.net:

hard and soft

Max Haas

Feldgasse 9

Voecklabruck, AT 4840

AT

Phone: 0043-7672-28315

Fax..:

Email: max.haas@voecklabruck.com

In short, hard and soft dba com-pro.net (located on a server in AT)created a site for a hotel which happens to be in Voecklabruck and is located on a server registered to CashMaster (US) containing a subdirectory which contains an Ebay theft identity script.

It's a shame hacking back into a thiefs system is a criminal act or I might have some fun here.

Link to comment
Share on other sites

----------------

On 4/16/2004 10:57:10 AM 3dzapper wrote:

if I have trouble finding the strangeness viewing the source of the email.

???????????

Max and Steve gave the right advise. When in doubt, delete. And have a good firewall, virus protection, spyware protection and adware protection. Even on Yahoo with spamguard spam happens.

Rick
----------------

Rick,

Just to be clear here. Once a email is in your inbox on your computer it has already past your firewall, Virus software and the works. Right clicking on it and choosing properties only affords a chance to look at the path it took to reach your inbox. No danger there at all. Its the best way to see if a email is from who it says it is from.

Craig

Link to comment
Share on other sites

Ok,

Since I am occasionally a pr^ck and these little script kiddies piss me off, I followed Marilyns trail to her other website. Thankfully she asks for feedback on her site or just to vent, so I submitted the following to her:

why is there an ebay identity theft script located on your server belonging to Cashmaster Business Systems Inc? Why are fraudulent emails being sent to unsuspecting ebay members requesting them to use that script and subsequently give their personal information to a fraudulent company? Ebay has been notified.

If SHE isn't responsible, she certainly will want to know how a theft script was placed on her managed assets jeopardizing her reputation.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...