eBay Member Message Phishing Scam

12:49.07 - Sunday 28th August 2005   (Link to This Entry)

Another version of the classic phishing scam, this time the scamsters are sending out email that looks like a message from another ebay member. The message is framed in typical eBay garb and reads:

I sent you the money , where's the package ? You promised that after i send the money you send the goods asap . is this a fraud? Please let me know! Should I contact the autorities ?

Rolland

The idea is that you click the 'Respond Now' button and log in to a fake eBay site (This one is http://61.249.111.131/icons/%20/eBaynew/login.php), giving up your details in the process. Interestingly, the email purports to come from eBay member nukem21, who is no longer a registered user. Is this a clue, or another hacked account?

The email addresses are scraped from actual eBay auctions, so an easy way to identify these dodgy emails is to put two email addresses on your auction pages. I use paypal@mydomain and nochex@mydomain - and almost without fail I receive two copies of the same email. Every. Single. Time.