Beware of a very clever ebay scam. Here's how it works. The bad guy hijacks a
seller's ebay account login info to control the account. When you send the
seller a question about the item they have listed for sale, they reply with an
answer about a completely different item than the one you asked about.
(However, the email response appears to be a valid ebay email.) So you think,
well either I mistakenly asked a question about the wrong item or the seller is
confused and responded about the wrong item. When you click on the link in the
email to view the item again because you want to see the item to make sure it
is correct, it takes you to a spoof ebay site that asks for you to login in
with your ebay login. It appears exactly like the real ebay login.
This happened to me a couple of days ago. But when I got to the point where
it asked for my login, I stopped and didn't enter anything because I've used
ebay enough to know that they don't ask for your login just to view an item,
only to save it. I emailed ebay about it and they gave me some boiler plate
reply warning about hijacked accounts. Then last night, I got an email from
the REAL seller telling me that his account had been hijacked and he finally
got it straightened out after a few days. If I had entered my login info, they
would have then hijacked my account and the cycle continues. No doubt, that's
how his was hijacked.
-Greg
"Date: Sun, 2 Apr 2006 13:28:22 -0400
From: Hoyt <hoyt@cavtel.net>
Subject: [TR] Phishing (was: Recent SCAMS)
These scams are known as "phishing". They are social engineeering
attempts to
get you to reveal confidential information. ....something like 80% of people
take the bait for phishing.
Rule of Thumb: Ignore and delete _any_ email that wants you to verify
confidential information. Legitimate institutions will not ask you to
do this."
---------------------------------
Blab-away for as little as 1"/min. Make PC-to-Phone Calls using Yahoo!
Messenger with Voice.
---------------------------------
How low will we go? Check out Yahoo! Messengers low PC-to-Phone call rates.
=== This list supported in part by The Vintage Triumph Register
=== http://www.vtr.org
|