Careful eBay sellers... I just got tricked with this eMail

[fs5]

I just got tricked with this email:

Hi, please add another $12 for shipping to ALASKA.
jzcczmui-ljmw@mail.com wrote:
Hello, what is the shipping cost to NUNAVUT?

--------------------

Question from: scluflo
Title of item: Ikea Tosig clown mobile , NEW
Seller: eftjsc
Starts: Jan-29-03 19:51:23 PDT
Ends: Feb-05-03 19:51:23 PDT
Price: Starts at $111.75
To view the item, go to: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=631908871


Visit eBay, The World's Online Marketplace TM at
http://www.ebay.com

the link goes here when you click on it
don't go here unless you know what you're doing: http://ant.elogic.cc/~proksy.ws/ws/eBayISAPI.dll/ViewItem&item=3425513112&category=98583.html
anybody want to look at the source and tell me what it does? I opened it with firebird so I assume whatever IE exploit he was using failed on me.

 

[AntMan530]

dam...was i not suppose to go that link below?

 

[Ichinisan]

It probably uses this vulnerability.

http://www.microsoft.com

@webpages.charter.net/ichinisan/files/microsoft.htm

 

[CZroe]

^me

 

[Ichinisan]

Your quote with the email has the spoofed URL instead of the actual target.

With most browsers, even copying a shortcut from the malformed link will copy the spoofed URL instead of the actual target.

 

[fs5]

Originally posted by: Ichinisan
Your quote with the email has the spoofed URL instead of the actual target.

With most browsers, even copying a shortcut from the malformed link will copy the spoofed URL instead of the actual target.

but I also posted the true URL. There is some javascript on that page and I don't care to decode at the moment. I just wanted to warn people in case they get the same email. I was selling some items on eBay and just got used to clicking on every email that had to do with eBay 😱

 

[MikeyIs4Dcats]

Originally posted by: fivespeed5
I just got tricked with this email:

Hi, please add another $12 for shipping to ALASKA.
jzcczmui-ljmw@mail.com wrote:
Hello, what is the shipping cost to NUNAVUT?

--------------------

Question from: scluflo
Title of item: Ikea Tosig clown mobile , NEW
Seller: eftjsc
Starts: Jan-29-03 19:51:23 PDT
Ends: Feb-05-03 19:51:23 PDT
Price: Starts at $111.75
To view the item, go to: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=631908871


Visit eBay, The World's Online Marketplace TM at
http://www.ebay.com

the link goes here when you click on it
don't go here unless you know what you're doing: http://ant.elogic.cc/~proksy.ws/ws/eBayISAPI.dll/ViewItem&item=3425513112&category=98583.html
anybody want to look at the source and tell me what it does? I opened it with firebird so I assume whatever IE exploit he was using failed on me.

Probably NOT a good idea to post the mailicious link here...especially auto-linked...

 

[Ichinisan]

My URL was not malicious. A virus scanner may report it as such because I might be using the spoofed URL to ask you for your password...which I didn't.

 

[bunker]

Not Found
The requested URL /~proksy.ws/ws/eBayISAPI.dll/ViewItem&item=3425513112&category=98583.html was not found on this server.