ecs@netbloc.com: 715: RE: [ecs] A more clever example of a spoof email (IMPORTANT)

Subject:
From:
Date:

RE: [ecs] A more clever example of a spoof email (IMPORTANT)
Bill Walters
Thu, 20 May 2004 20:24:30 -0500

Thu, 20 May 2004 20:24:30 -0500

Mark,

Wow.... Thanks for the "tip".

I hope you've sent a notice to e-bay along with a copy of this "spoof"
e-mail.

Bill

  -----Original Message-----
  From: Mark Gilmore [mailto:mark@OmnipotenceSoftware.com]
  Sent: Thursday, May 20, 2004 7:17 PM
  To: ecsl@netbloc.com; ecs@netbloc.com
  Subject: [ecs] A more clever example of a spoof email (IMPORTANT)


  What follows is another fake ebay email (intended to scam me out of my
ebay password).
  Unlike my previous example, *this* disguised link takes you to a
legitimate-looking URL (inst of ebay.com):

http://ebay-registration-update.netfirms.com/aw-cgi/eBayISAPI.dll/in.htm
  And the site itself is identical to the real thing.
  Note that this scam could be used for any web-based businesses (not just
ebay).
  Bottom line - NEVER give out account/password information in response to
an emailed request.


    Reply-To: "eBay" <aw-confirm@ebay.com>
    From: "eBay" <aw-confirm@ebay.com>
    To: <mark1@markgilmore.net>
    Subject: TKO NOTICE : Update you eBay account information
    Date: Fri, 21 May 2004 01:43:14 +0300
    X-Mailer: Microsoft Outlook Express 6.00.2800.1106




    eBay account notification


    eBay user,

    You are registered with eBay using the following email address
(mark1@markgilmore.net).
    As part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website, we are undertaking a period
review of our member accounts.
    You are requested to visit our site by following the link given below

http://www.ebay.com/aw-cgi/eBayISAPI.dll&UserID=mark1@markgilmore.net&SSL=1
    Please fill in the required information.
    This is required for us to continue offering you a safe and risk free
environment to run your auctions, and maintain the eBay Experience.
    Thank you!

    Allen Andrews,
    FADE Protection System Manager.

    As outlined in our User Agreement, eBay will periodically send you
information about site changes and enhancements.
    Please review our Privacy Policy for further details.








    Announcements   |   Register   |   Safe Trading Tips   |   Policies   |
Feedback Forum   |   About eBay


    Copyright © 1995-2004 eBay Inc. All Rights Reserved.
    Designated trademarks and brands are the property of their respective
owners.
    Use of this Web site constitutes acceptance of the eBay User Agreement
and Privacy Policy .



    ---
    Incoming mail is certified Virus Free.
    Checked by AVG anti-virus system (http://www.grisoft.com).
    Version: 6.0.687 / Virus Database: 448 - Release Date: 5/16/2004
  Mark Gilmore
  http://OmnipotenceSoftware.com

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.686 / Virus Database: 447 - Release Date: 5/14/2004

Mark,

Wow.... Thanks for the "tip".

I hope you've sent a notice to e-bay along with a copy of this "spoof" e-mail.

Bill

-----Original Message-----
From: Mark Gilmore [mailto:mark@OmnipotenceSoftware.com]
Sent: Thursday, May 20, 2004 7:17 PM
To: ecsl@netbloc.com; ecs@netbloc.com
Subject: [ecs] A more clever example of a spoof email (IMPORTANT)

What follows is another fake ebay email (intended to scam me out of my ebay password).
Unlike my previous example, *this* disguised link takes you to a legitimate-looking URL (inst of ebay.com):
http://ebay-registration-update.netfirms.com/aw-cgi/eBayISAPI.dll/in.htm
And the site itself is identical to the real thing.
Note that this scam could be used for any web-based businesses (not just ebay).
Bottom line - NEVER give out account/password information in response to an emailed request.

Reply-To: "eBay" <aw-confirm@ebay.com>
From: "eBay" <aw-confirm@ebay.com>
To: <mark1@markgilmore.net>
Subject: TKO NOTICE : Update you eBay account information
Date: Fri, 21 May 2004 01:43:14 +0300
X-Mailer: Microsoft Outlook Express 6.00.2800.1106

eBay account notification

eBay user,

You are registered with eBay using the following email address (mark1@markgilmore.net).
As part of our continuing commitment to protect your account and to reduce the instance of fraud on our website, we are undertaking a period review of our member accounts.
You are requested to visit our site by following the link given below
http://www.ebay.com/aw-cgi/eBayISAPI.dll&UserID=mark1@markgilmore.net&SSL=1
Please fill in the required information.
This is required for us to continue offering you a safe and risk free environment to run your auctions, and maintain the eBay Experience.
Thank you!

Allen Andrews,
FADE Protection System Manager.

As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements.
Please review our Privacy Policy for further details.

Announcements | Register | Safe Trading Tips | Policies | Feedback Forum | About eBay

Copyright © 1995-2004 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
Use of this Web site constitutes acceptance of the eBay User Agreement and Privacy Policy .

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.687 / Virus Database: 448 - Release Date: 5/16/2004

Mark Gilmore
http://OmnipotenceSoftware.com