PDA

View Full Version : Beware of ebay "Security Check"


Archive
09-02-2003, 06:55 PM
Posted By: <b>Rob M</b><p>Ebay bidders, which about all of us are, may want to beware of what I believe is an attempt to pick off Ebay Userid's and Passwords. I received an email with official ebay logos, etc. which indicated it was a "security check". It asked for a resubmission of my userid and password. If you happen to get one of these DON'T SEND IT IN. Ebay does not do this. My guess is it came from a fraud auction that I tried to stop yesterday. Even though this was not related to baseball I will give some details for the curious since we see a lot of this with ebay card auctions. The legit auction was ebay auction number 2552947008. Shortly after it closed a phoney one was started as auction 2555171678. It was a different seller that copied the earlier auction and was holding a "private auction" and didn't list his location. He offered the "one of a kind" item at half the price. I notified the original seller and both of us turned it into the vacationing ebay security. Meanwhile, of coarse, somebody took the "buy it now". They will probably be screwed before ebay wakes up tomorrow. I tried scaring off the fraudulent seller with an email. I didn't hear back from them (suprisingly) but this afternoon I received the "security check" email supposedly from ebay. I believe it was this same person trying to steal my ebay account. I believe they probably stole the one they are using from the crime as the person who had the account of the fraudulent auction had a very respectible and long feedback (although it is not unheard of for people to build a solid feedback before the crime but they usually go after a big "hit" with multiple fraud auctions before disappearing). Anyway, as always, BEWARE and have pity for the freshman ebayers out there that are learning a hard lesson.

Archive
09-02-2003, 07:06 PM
Posted By: <b>Rob</b><p>By the way, for those of you in-the-know, the details of the email are shown below. I'm not quite sure how to decipher it but I'm sure a few of you may. The obvious item is the "may be forged" notation.<BR><BR>Return-path: &lt;aw-confirm@ebay.com&gt;<BR>Received: from ms-mta-01 (ms-mta-01 [10.15.0.71]) by ms-mss-02.rdc-kc.rr.com<BR> (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))<BR> with ESMTP id &lt;0HKK00FU98NQ7P@ms-mss-02.rdc-kc.rr.com&gt; for<BR> rmorgan4%kc.rr.com@ims-ms-daemon; Mon, 01 Sep 2003 19:14:14 -0500 (CDT)<BR>Received: from flmx01.mgw.rr.com (flmx01.mgw.rr.com [65.32.1.38])<BR> by ms-mta-01.rdc-kc.rr.com<BR> (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))<BR> with ESMTP id &lt;0HKK007RK8NP60@ms-mta-01.rdc-kc.rr.com&gt; for rmorgan4@kc.rr.com<BR> (ORCPT rmorgan4@kc.rr.com); Mon, 01 Sep 2003 19:14:14 -0500 (CDT)<BR>Received: from statie10<BR> (unassigned-reverse.pcnet.ro [213.154.147.10] (may be forged))<BR>by flmx01.mgw.rr.com (8.12.8p1/8.12.8) with SMTP id h820E9cj014220; Mon,<BR> 01 Sep 2003 20:14:11 -0400 (EDT)<BR>Date: Tue, 02 Sep 2003 03:15:40 +0300<BR>From: "Ebay.com" &lt;aw-confirm@ebay.com&gt;<BR>Subject: Security Check<BR>Reply-to: aw-confirm@ebay.com<BR>Message-id: &lt;200309020014.h820E9cj014220@flmx01.mgw.rr.com&gt;<BR>MIME-version: 1.0<BR>Content-type: multipart/related; boundary=8bfa05e0-dcf3-11d7-b106-0040f44b5a06<BR>X-Virus-Scanned: Symantec AntiVirus Scan Engine<BR>Original-recipient: rfc822;rmorgan4@kc.rr.com<BR><BR>

Archive
09-03-2003, 06:27 AM
Posted By: <b>halleygator</b><p>I got the same bogus message, and EBay confirmed it is FAKE.<BR><BR>I went ahead and changed my EBay password just in case.