I just got an email that appeared to be from ebay, with a short note asking about an item I had apparently put up for sale on Ebay. I got very confused for a moment, as I haven't ever put anything up for sale on Ebay. I attempted to search for the item number mentioned, and was about to click on the link to the mailers profile when I noticed something was wrong. The link didn't go to ebay.com. In fact, it went to rather random ip address and the link ended with a .dll file. I immediately stopped the attempt to connect.
Turns out the message wasn't from ebay at all. It was a spammer's attempt to give me a virus. It looked very convincing. To all appearances it was genuine. The only difference was that basically every link in the email went to the same place, the same .dll, the same virus.
Just thought I'd warn everyone. Be very careful with e-mail from ebay. Check the link before you click and make sure it goes to ebay.com.
Posted by mackillian (Member # 586) on :
If Ebay sends you a legit email, they'll put it in your messages in your profile for Ebay.
So if you get any email saying it's from ebay, don't click any of the links in the message. Instead, type the ebay address in your browser, log into your account, and look for the email there. If it's not, report it. If it is, well, do what it says.
Posted by NicholasStewart (Member # 9781) on :
Some of these emails will send you to what looks like an authentic ebay page. Once you login they seemlessly store your ebay username/password, forward you to ebay, login on your behalf. Many people have no idea what has taken place.
Are they clever or just plain evil?
Posted by Mucus (Member # 9735) on :
It can be both
Posted by ketchupqueen (Member # 6877) on :
quote:If Ebay sends you a legit email, they'll put it in your messages in your profile for Ebay.
What mac said.
In fact, ebay never sends us things in our regular e-mail any more. If I get something in the regular email from "ebay", not through the "my messages page" on ebay.com, I forward it to spoof at ebay dot com automatically without even checking "my messages", because I've never yet got something from them (except about things I've listed) that are real.
Posted by mackillian (Member # 586) on :
also, apparently there's a new-ish scam where you'll be browsing an auction item page, click to view it, and somehow you'll be taken to your login page.
that's a spoof page. you should not have to login to view an item. do not log in that way.
that's what an ebay rep told me.
Posted by Icarus (Member # 3162) on :
I get one or two of those e-mails every week.
Posted by dantesparadigm (Member # 8756) on :
Anytime you're loging in to something secure, which involves entering information, the URL should read https rather than just http, if you're borderline about the authenticity, always check for that.
Posted by Will B (Member # 7931) on :
I *never* click on a link in email unless it's from someone I know. Even if it's written as a URL:
it can be a link to something else, with text to make it look otherwise.
Posted by Bob_Scopatz (Member # 1227) on :
eBay has HUGE problems with this. There are some items sold on e-bay (electronic drumsets are one, for some weird reason) that have almost a 100% phishing rate. Nasty people out there set up fake pages and offer to sell the item to you as the "runner up" after, supposedely, the real winner backed out or something. They ask you to log in and bid again...
It's just bizarred.
Yeah, I've put a block on e-mails from any source including the ebay or PayPal names. It's a royal pain.
Posted by TomDavidson (Member # 124) on :
quote:Check the link before you click and make sure it goes to ebay.com.
Wow. This is a warning from, like, 2003.
Seriously, if your anti-spam program doesn't do SPF, get one that does.
Posted by MightyCow (Member # 9253) on :
I feel like there needs to be an Internet face-punching law. Any time someone is found out to be trying to rip people off through the Internet, or send spam, or otherwise misuse the WWW, they get punched in the face by everyone they effect, including all the staff of the company they are spoofing.
I feel like this legislation would make a real difference in the amount of spam and other shady goings on.
Posted by ketchupqueen (Member # 6877) on :
How will this law be enforced? What about pacifists and people who don't want to break their hands punching someone's face?
Posted by MightyCow (Member # 9253) on :
I'm not sure about enforcement. I also assume that all parties who are entitled to punch face may elect a second, who can then perform the face-punching on their behalf. Pacifists can either help with the face punching, or take the extra spam.
Ideally, I think all computer monitors should come installed with a large boxing glove on a spring. When someone is found to be engaging in illegal Internet activity, the boxing glove activates, and punches them in the face. I think this would really make people think twice about their actions.
When you send out 5 million spam emails, are you really willing to get punched in the face 5 million times? I doubt it.
Posted by stihl1 (Member # 1562) on :
quote:Originally posted by ketchupqueen: How will this law be enforced? What about pacifists and people who don't want to break their hands punching someone's face?
I'll do it.
Posted by mr_porteiro_head (Member # 4644) on :
The world doesn't make any sense anymore! Posted by Phanto (Member # 5897) on :
Wait a second. I tried clicking on that link, and I ended up on Google? Did Google install a virus on my computer or something? This also happens when I type something into the little box on the upper right corner; I am using Firefox.
Is Google installing virii on my computer? Plz, help!
Posted by Alcon (Member # 6645) on :
quote:Originally posted by stihl1:
quote:Originally posted by ketchupqueen: How will this law be enforced? What about pacifists and people who don't want to break their hands punching someone's face?
I'll do it.
Me too. We can do a two for one deal! Everyone who doesn't wanna punch the person gets to delegate two seconds to stand in for them. That way we can double the number of punches Posted by Will B (Member # 7931) on :
Phanto, there's nothing wrong with your computer -- it's just that the post has a link that isn't what it appears.
Phishing emails do the same thing, except that the links they take you to are on a machine that the scammers control, so they can get you to input your password, credit card info, etc., and rip you off.
Posted by Phanto (Member # 5897) on :
![[Wink]](wink.gif)
![[Angst]](graemlins/angst.gif)
![[Big Grin]](biggrin.gif)