For those that get \"Paypal\" and \"Ebay\" emails
 

This has been posted several times here but I am going to post on the subject again:

I got an email from "Paypal" saying that my account has been compromised and that I need to log in. Well we all know that it is "phishing" so they can get your account and password. I clicked on the link to see the address and it was "http://hometown.aol.de/elisabeth2211/". So it is a complete fake and worse the hacker is lazy. Can't even at least try to make the address look like paypal. These guys are scum.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

thanks for the link in the OP. I put my info on the site, and it told me my account will not be frozen.

actually, i like putting in fake usernames with passwords as "GoF***Yourself"

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

[/ QUOTE ]

you are probably wasting more of your time than you are of their time

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

THX for the post.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]


actually, i like putting in fake usernames with passwords as "GoF***Yourself"

[/ QUOTE ]

I do that too!

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

[/ QUOTE ]

Yea, actually, there were many domains registered with some form of "Katrina" and "charity" or donation related words before it even hit. As soon as it was clear that Katrina was going to cause damage, the scammers prepared. How sick it is to actively try to scam and make money on someone else's downfall.

I wish I would be out some night to have a random person brag about how much they made on a disaster. I would quickly register a domain name in that person's name because they would soon need some charity of their own.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
This has been posted several times here but I am going to post on the subject again:

I got an email from "Paypal" saying that my account has been compromised and that I need to log in. Well we all know that it is "phishing" so they can get your account and password. I clicked on the link to see the address and it was "http://hometown.aol.de/elisabeth2211/". So it is a complete fake and worse the hacker is lazy. Can't even at least try to make the address look like paypal. These guys are scum.

[/ QUOTE ]

I send them to spoof@ebay.com and spoof@paypal.com.

I always get the same annoying canned answer back, but I like to think somehow somewhere they're being tracked down.

KO

Re: Alternatively you can do this...
 

-----Original Message-----
From: abuse@megamailservers.com [mailto:abuse@megamailservers.com]
Sent: Wednesday, September 14, 2005 5:02 PM

Subject: Re: FW: Phishing site needs to be removed

Hello,

The specified site (http://hometown.aol.de/elisabeth2211/) is not actually hosted by us; however, it was redirecting traffic to a phishing site on our system.
The domain on our system has been terminated for violating our TOS.

We thank you for your assistance with this matter.

Regards,

Alex R.
abuse@megamailservers.com

DNS Admin wrote:

>
>
>
>
> ------------------------------------------------------------------------
>
> *From:* Ellis Romero
> *Sent:* Wednesday, September 14, 2005 8:59 AM
> *To:* support@internetnamesforbusiness.com
> *Cc:* spoof@paypal.com
> *Subject:* Phishing site needs to be removed
>
>
>
> Hello Sirs,
>
>
>
> The following site http://hometown.aol.de/elisabeth2211/
> (216.251.31.94) hosted by your ISP needs to be immediately removed and
> the owners contacted with regards to running a PayPal password
> phishing scam. I would expect that you would want to sever yourself
> from any such activity with immediate effect. Please let me know what
> action you take,
>
>
>
> Regards,
>
>
>
> Ellis Romero
>

Re: Alternatively you can do this...
 

wow I didn't know you could turn them in somewhere (other than ebay or paypal.) Cool. Nice post romero!!!!

Re: Alternatively you can do this...
 

Basically it was just an email to the ISP of the hosting site. Usually gets the ball rolling quicker than a direct email to Paypal.

Rom

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

If you PM me the IPs of the phishers then I could initiate a distributed denial of service attack(DDos) against them. I could knock them offline for at least a day. Let me know what you want to do.

Re: Alternatively you can do this...
 

[ QUOTE ]
Basically it was just an email to the ISP of the hosting site. Usually gets the ball rolling quicker than a direct email to Paypal.

Rom

[/ QUOTE ]

Is there anything anyone can do to put these assholes behind bars or fine them or anything? One ISP shuts them down, they'll just do it again.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
If you PM me the IPs of the phishers then I could initiate a distributed denial of service attack(DDos) against them. I could knock them offline for at least a day. Let me know what you want to do.

[/ QUOTE ]

Umm... So you admit to maintaining a trojan virus of some sort that controls at least hundreds of computers? You're as bad as the phishers.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

I have gotten a few of these to my gmail account, which ironically is not used with my ebay/paypal accounts, they are listed in the spam section, and when you open them, the gmail client has a big red warning at the top stating that this email is/may be not from the original stated sender, which I think is great and would fix many of the problems of people entering in the info thinking it is real.

tobdog

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

i just received:

"EBAY ACCOUNT PROTECTION SERVICE
SECURITY SERVICE
Attention id number: xxx

Dear customer. Please read this message and follow it's instructions

Unauthorized Account Access

We recently reviewed your account, and we suspect an unauthorized ATM based transaction on your account. Therefore as a preventive measure we have temporary limited your access to sensitive features.

To get started, please click the link below:

http://signin.ebay-quick.com/eBayISAPI/index.htm

Click Respond Now for update your information."

i followed the link, entering silly info like "1234" etc, but arrived at my real page in the end anyway! how come?

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

cookies probably

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
[ QUOTE ]
If you PM me the IPs of the phishers then I could initiate a distributed denial of service attack(DDos) against them. I could knock them offline for at least a day. Let me know what you want to do.

[/ QUOTE ]

Umm... So you admit to maintaining a trojan virus of some sort that controls at least hundreds of computers? You're as bad as the phishers.

[/ QUOTE ]

Okey dokey.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

The easiest way to avoid any scam:

If you get an email claiming to be from paypal, your bank, broker, etc... Close the email. Type in www.paypal.com or whatever, and log directly into the site. If there is a legit problem requiring your action, you will be alerted when you login

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
The easiest way to avoid any scam:

If you get an email claiming to be from paypal, your bank, broker, etc... Close the email. Type in www.paypal.com or whatever, and log directly into the site. If there is a legit problem requiring your action, you will be alerted when you login

[/ QUOTE ]

Even better yet, don't believe any email. If they were to do something like this, they have your phone number and would call you directly.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
When I get these, and I have some time to kill, I often will fill out everything with false, but close to real, information. Figure that the least I can do is make them go off on a wild goose chase with bad information. [img]/images/graemlins/smile.gif[/img]

[/ QUOTE ]

I once went to one of these phishing web pages, saved the page to my hard drive, and modified it by putting a javascript loop in it to keep sending the data over and over. If you put a "target" attribute on the HTML form so that the data returned from the site goes into a different window the loop will keep executing--at least in the older version if IE that I was using at the time. I know a test credit card number which has a valid check digit and will pass most validation routines but isn't actually a valid number. I also set up the javascript to put 1 of n where n was the number of iterations I had set the loop for, in one of the address lines. I put obscenities, death threats, descriptions of what their cell mates would do to them in prison, etc. in other fields, but always put my correct email address in. Over the course of a weekend, I sent several hundred thousand submissions to them. Curiously enough, after doing this, the number of phishing emails I get went from 4 or 5 per week to maybe only 4 or 5 per year. This leads me to believe that it's a fairly small group of people that are doing most of these emails, and that they are sharing information.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
If you PM me the IPs of the phishers then I could initiate a distributed denial of service attack(DDos) against them. I could knock them offline for at least a day. Let me know what you want to do.

[/ QUOTE ]

Well, it looks like these clowns were using somebody's AOL home page. Although the idea of doing a DDOS against AOL has a certain appeal, it would be likely to get you in trouble. Possibly the phishers were dumb enough to use their on AOL account, but more likely they hacked somebody else's account. One time I found a phishing web site was hosted on a machine whose web root looked to be the web site for a Chinese electronics store. I also found that the server in question had an open telnet connection, which leads me to believe that the phishers simply scanned for an open telnet connection, hacked in and put their web site there. I find that very often, by the time I see a phishing email, the site that it links to has already been taken down. I think they usually use a server that they have hacked into, rather than uaing one that they own or paying someody to host it. It's much harder to trace the responsible parties that way.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

Now that one is a neat one. If you look at the address bar you will see that it places a hidden window over the URL so that it looks like Ebay.

Now if they just changed the title of the URL to look like PayPal too... see below:

https://signin.ebay.com/ws/eBayISAPI.dll

Then they might stand a better chance. Anyways I emailed Comcast and hopefully they will take this mofo down.

Rom

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

I find the most alarming thing about these scam e-mails is that I didn't start getting them regularly until after I was a member of the services.

Within days of joining paypal and ebay I began receiving scam spam.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

I get them every other day. I buy and sell so much on ebay it seems like when I buy something the hackers know it. Then I get a scam email the next day. Disturbs me too.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
This has been posted several times here but I am going to post on the subject again:

I got an email from "Paypal" saying that my account has been compromised and that I need to log in. Well we all know that it is "phishing" so they can get your account and password. I clicked on the link to see the address and it was "http://hometown.aol.de/elisabeth2211/". So it is a complete fake and worse the hacker is lazy. Can't even at least try to make the address look like paypal. These guys are scum.

[/ QUOTE ]

You are misleading the public, my friend. These emails from ebay and paypal are always legitimate, and should always be responded to.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
I was listening to a radio news article the other day, and it said that within hours of hurricane Katrina hitting, fake websites started to appear taking donations. Thats pretty sick.

[/ QUOTE ]

Thats the unpleasant face of capitalism, anything for a $.

Mack

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

I was momentarily fooled by one of these too.

I was having trouble with my Neteller account and I was expecting an email with some security requirments. I'd say this is one of the scammers most likely sucess scenarios were people are already having issues with their paypay/netteller account.

When I did follow the link it was to some netteller looking page with a jpeg 'padlock'. Shortly after that I discovered some sort of trojan in my IE temp files, it may have been from that site.

Always be folding

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]

http://signin.ebay-quick.com/eBayISAPI/index.htm

Click Respond Now for update your information."

i followed the link, entering silly info like "1234" etc, but arrived at my real page in the end anyway! how come?

[/ QUOTE ]

After you submit the information, the phisher redirects you to the real "My eBay" page. If you have the settings in your My eBay page to keep you logged in, every time you go to the page you don't have to log in.

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

do they even have computers in Nigeria...or toilets that you actually have to flush (crapping in the river doesn't count)?

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

[ QUOTE ]
do they even have computers in Nigeria...or toilets that you actually have to flush (crapping in the river doesn't count)?

[/ QUOTE ]

Haven't you ever gotten any spam from Nigeria? You know, the kind written ALL IN CAPS, with numerous spelling mistakes, asking you to help transfer money out of the country that used to belong to the ABACHA family? They obviously have computers -- the computers are an integral part of their "business dealings".

Re: For those that get \"Paypal\" and \"Ebay\" emails
 

Yes, because we all know that people in the business of identity theft will create websites under there own identity.