Chat
Micro Mart Forum
Home       Members    Calendar    Who's On
Welcome Guest ( Login | Register )
        



Phishing Expand / Collapse
Author
Message
Posted 17/10/2006 20:47:50
186

186186186186186

Group: Forum Members
Last Login: 03/03/2007 13:08:22
Posts: 2, Visits: 7
Readers should be warned of a new scam aimed at eBay members who use Paypal. You get an email purporting to come from Paypal card members support saying that your account has been limited because of irregularities. When you click on the link in the email you come to a login page which asks for email address and password. (There is no https in the URL box, padlock icon and firefox does not indicate a secure site.)I t seems to accept any email and password combination.

I logged in and was asked for all my financial details, card numbers, and PINs. I thought about leaving obscenities but decided against it! I was impressed by the realism of the site. It even had links to actual Paypal.com pages.

I promptly emailed paypal.com with a copy of the email and the site URL seems to have been closed down.

JdB
Post #140929
Posted 17/10/2006 21:19:45


Pentium

PentiumPentiumPentiumPentiumPentium

Group: Forum Members
Last Login: 13/10/2007 00:31:54
Posts: 1,400, Visits: 1,342
Well done, JDB, and welcome to the forums.

It's people like you, taking the time and trouble to
report this nonsense, that help keep this carp in check.

The e-beers are on me.

..................................................................
Patrick
Relax! It's only an opinion.
Don't anthropomorphise computers - they really hate that!

34.714, Total Geek
Rig #1 -
Abit AW9D-MAX
Intel D805 @ 4319.49Mhz
Ingsoc newspeak @ 300wpm, just to see if anyone notices this sig change.
Post #140945
Posted 17/10/2006 21:19:54


Pentium

PentiumPentiumPentiumPentiumPentium

Group: Forum Members
Last Login: Today @ 18:16:51
Posts: 4,703, Visits: 4,171
nicely spotted good move.

I am using internet explorer 7 with anti phishing. But I have had to switch it off because the damn thing intermittently just locks up.

Hope fully im smart enough to avoid a scam.

The Lost Artifact is not lost. Why? Because I have it.

Post #140946
Posted 17/10/2006 21:24:20


Pentium

PentiumPentiumPentiumPentiumPentium

Group: Forum Members
Last Login: Today @ 19:23:08
Posts: 2,154, Visits: 4,988
A couple of months back I received two 'favourite searches' emails from ebay which were directed by Outlook Express to my Ebay/Paypal folder.  At the same time I received a phishing email for paypal and because I was expecting an email from paypal it almost got me.  If it had asked me to log in and then redirected me to paypal rather than asking for credit card details I'd have fallen for it.


gaming: E4400@2.66GHz / P5K-E / 2x1GB PC8000@533MHz / 2x80GB D'Max 9-RAID0 + 320GB / 8800GTS 512MB / ViewSonic VX2835wm
server+media: P4 2.8GHz @ 2.4GHz / 775Dual-VSTA / 2x512MB PC3200 / 1000GB+500GB+250GB / HD2400pro
also: P3 for the mrs and a linux box and probably enough bits to build another one
Post #140951
Posted 17/10/2006 22:27:04


Pentium

PentiumPentiumPentiumPentiumPentium

Group: Forum Members
Last Login: 13/10/2007 00:31:54
Posts: 1,400, Visits: 1,342
This topic reminded me to check my phishing-tackle box.

Here's a snippet that may be of interest, a classic:

Trust and Safety Department
Llyods TSB Bank
Please do not reply to this e-mail as this is only a notification.
Mail sent to this address cannot be answered.

As is so common, the printed url hides the real url,
which goes via geocities.com.


..................................................................
Patrick
Relax! It's only an opinion.
Don't anthropomorphise computers - they really hate that!

34.714, Total Geek
Rig #1 -
Abit AW9D-MAX
Intel D805 @ 4319.49Mhz
Ingsoc newspeak @ 300wpm, just to see if anyone notices this sig change.
Post #140974
Posted 03/11/2006 04:22:36


186

186186186186186

Group: Forum Members
Last Login: 07/04/2008 11:11:57
Posts: 89, Visits: 335
Hmm.  I have to say I am very surprised to read this here.  If, as is obviously the case, people are still unaware of scams like this one, which has been running in various forms for as long as paypal and ebay have, then I think you really should do an article to educate people. 

Check here
http://www.millersmiles.co.uk/search/PayPal
http://www.millersmiles.co.uk/search/eBay

for examples of the most recent ebay and paypal related phishing scams in detail...familiarize yourself with them and remember just one little fact that will keep you safe from these for good:
No BANK OR EBAY OR PAYPAL WILL EVER EMAIL YOU TO ASK FOR PASSWORD INFORMATION!
Never click a link in an email especially if it claims to be from one of these places or a finance place you use.  If the bank/ebay/paypal site REALLY wants you to update your info then do the sensible thing and open your browser yourself, type in the usual address and, when you log in as usual you will get a message telling you if there is really an account update required. There won't be of course!

If there was an article put in MM, how about putting links in huge letters to sites for checking these kind of  things out like

http://snopes.com

http://www.millersmiles.co.uk/index.htm

http://www.antiphishing.org/phishing_archive/phishing_archive.html

http://www.indiana.edu/~phishing/

Also useful:

http://www.phishtank.com/

http://www.castlecops.com/

http://antivirus.about.com/od/emailhoaxes/l/blenhoax.htm

Also read about the infamous Nigerian scam too...
http://home.rica.net/alphae/419coal/

Apologies if I started this off a bit arrogant, I truly am amazed that with google only a click away and with the absolute saturation of stories about phishing and email scams and also the fact that paypal AND ebay both warn you in every email they send you, not to fall for fake emails, that there are people willing to learn how to use a PC & browse the web etc ... but not stop to think twice before just happily clicking some email link?!

People need it reinforced that the internet needs the same (or more!) amount of caution regarding personal data and security as offline real-world transactions do.
There are a million ways of fooling someone into giving their password etc.  It is the simplest thing in the world to create a webpage that is a replica of paypal or ebay login pages. Never be fooled by it. ALWAYS type the address in the browser yourself, whatever the email tells you!

I am ... Justanobody.

Post #144998
« Prev Topic | Next Topic »


Reading This Topic Expand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: TheEditor, Sarah of the Dead

Permissions Expand / Collapse

All times are GMT, Time now is 11:23pm

Powered by InstantForum.NET v4.1.4 © 2008
Execution: 0.125. 11 queries. Compression Disabled.