Warning: e-Bay spoof e-mail

[gshv]

I received one this morning, full text with headers is below, I only removed my e-mail address. If you get one please forward it to spoof@ebay.com.

--------
Return-Path: <www@cws-2.ampira.com>
Received: from ims-2.prv.ampira.com (ims-2.ampira.com [216.27.95.26])
by hypnos.host4u.net (8.11.6/8.11.6) with ESMTP id h8C9vTU04303
for <x@x.com>; Fri, 12 Sep 2003 04:57:29 -0500
Received: from cws-2.ampira.com ([216.27.95.33] helo=cws-2.prv.ampira.com)
by ims-2.prv.ampira.com with esmtp (Exim 3.22 #1)
id 19xkdP-0001PN-00
for x@x.com; Fri, 12 Sep 2003 03:54:35 -0600
Received: (from www@localhost)
by cws-2.prv.ampira.com (8.11.6+Sun/8.11.6) id h8C9vSN26382;
Fri, 12 Sep 2003 05:57:28 -0400 (EDT)
Date: Fri, 12 Sep 2003 05:57:28 -0400 (EDT)
Message-Id: <200309120957.h8C9vSN26382@cws-2.prv.ampira.com>
To: x@x.com
Subject: eBay Security Request
From: aw-confirm@ebay.com
Status:

Dear eBay User,

During our regular update and verification of the accounts, we could not verify your current information. Either your information has changed or it is incomplete.
As a result, your access to bid or buy on eBay has been restricted. To start using your eBay account again, please update and verify your information by clicking the link below :


http://cgi3.ebay.com@cgi-dz.com/eBayISAPI.dll?&MfcISAPICommand=EnterConfirm&UsingSSL=0&pUserId=&ru=445&ap=0&dz=1


Thank you very much for your cooperation!

eBay Customer Support

Remember: eBay will not ask you for sensitive personal information (such as your password, credit card and bank account numbers, social security number, etc.)
in an email.

Copyright 1995 - 2003 eBay Inc. All rights reserved. Designated
trademarks and brands are the property of their respective owners.

[Trogdor]

I got one of these once, and not paying attention, I sent the scammer my information. It was a pain in the neck to get everything fixed, but if you do happen to fall prey to the scam, eBay Live Help (or whatever it's called) will fix it for you in about a half an hour.

The trick that they use with this is that the email is html based. That way they can dupe unsuspecting people with the link, in this format:

[gshv]

I just received another spoof e-mail. This e-mail claims to be from eBay, and it asks for credit card information. The e-mail s in HTML, so I copied only text information from it:

------------
Update your credit card on your eBay account
Need Help?
Use this secure form to place your credit/debit card on your eBay account or to update your credit/debit card information. The transmitted credit/debit card information is protected by the industry standard encrypted SSL connection.

Important: All this process will happen through our secure server.

Enter Your Credit Card /debit Card Information

eBay ID

eBay password


Payment Information

Card Type

Credit card /debit card number Credit Card: Visa, MasterCard , American Express, Discover;
Debit Card: Visa, MasterCard

Expiration date
Month: Day: Year:
Leave day as --, if day on credit/debit card is not listed

CVV2 Code
What's this?

Your name on card

Please enter your billing address as it appears on your credit card bill statement:

Billing address

City

State/province

Zip/postal code

Country

Phone Number

Sorry for any inconvenience
-----------

Gennadiy

[Minuteman]

I also got one today on an e-mail address that I NEVER gave to ebay:

[jrmunro]

I have received a few of these in the last couple of days

Dear PayPal member,


PayPal would like to inform you about some important information regarding your PayPal account. This account, which is associated with the email address





will be expiring within five business days. We apologize for any inconvenience that this may cause, but this is occurring because all of our customers are required to update their account settings with their personal information.


We are taking these actions because we are implementing a new security policy on our website to insure everyone's absolute privacy. To avoid any interruption in PayPal services then you will need to run the application that we have sent with this email (see attachment) and follow the instructions. Please do not send your personal information through email, as it will not be as secure.


IMPORTANT! If you do not update your information with our secure application within the next five business days then we will be forced to deactivate your account and you will not be able to use your PayPal account any longer. It is strongly recommended that you take a few minutes out of your busy day and complete this now.


DO NOT REPLY TO THIS MESSAGE VIA EMAIL! This mail is sent by an automated message system and the reply will not be received.


Thank you for using PayPal.





John

[gshv]

Another spoof. The link "http://cgi3.ebay.com/aw-cgi/ebayISAPI.dll?TestEmail&bpuser=0" in the body is not real link where user is sent. Extra space between "http" and the rest of the link in the message below was added by me.