eBay email scam

boi

Golden Member
Apr 12, 2002
1,695
0
0
Heres what I got in my email today :

From: aw-confirm@ebay.com

To: xxxx@comcast.net

Subject: Necessary Confirmation



This email was sent automatically by the eBay server in compliance with our

Privacy Policy . There has been registered a violation

of your profile - we apologise for the inconvenience and kindly ask you to take

the next step and run the password recovery process.



It is done for your protection and only you, the recipient of this email can

make the necessary confirmation and activate your account. To reset your

password and access your account, follow these steps:



1. Click on the link below it will take you to our Verify Your Identity page.



http://signin.ebay.com/aw-cgi/eBayISAPI.dll?SignIn



2 . Fill in the appropriate fields to reset your password and Security

Questions, and click Submit. You will then be able to access your account.



Thanks for using eBay !

















Copyright © 1995-2003 eBay Inc. All Rights Reserved.

Designated trademarks and brands are the property of their respective owners.

Use of this Web site constitutes acceptance of the eBay User Agreement and

Privacy Policy.



Do not login to eBay from that link, it will get your username and password. :|
 

Kenny

Platinum Member
Oct 12, 2002
2,567
0
76
The link looks like a normal eBay link. Is that the one that was included in the e-mail?
 

Legendary

Diamond Member
Jan 22, 2002
7,019
1
0
Wow that's amazingly real looking.

Edit: I think he copied/pasted the real email, and AT automatically linked the URL. I doubt the real link goes to the real eBay page.
 

Kenny

Platinum Member
Oct 12, 2002
2,567
0
76
Originally posted by: Legendary
Wow that's amazingly real looking.

Edit: I think he copied/pasted the real email, and AT automatically linked the URL. I doubt the real link goes to the real eBay page.

Ah. Post the fake link plz :)
 

loup garou

Lifer
Feb 17, 2000
35,132
1
81
Originally posted by: Legendary
I think he copied/pasted the real email, and AT automatically linked the URL. I doubt the real link goes to the real eBay page.
That's most likely what happened. boi, what url does the link take you to when you click the one in your email?
 

Kenny

Platinum Member
Oct 12, 2002
2,567
0
76
Ahh the page is all messed up now because of the long link.

It's hosted on gradserver.ads.orst.edu

I have a feeling some stupid kid is gonna get kicked out of school soon.
 

Mill

Lifer
Oct 10, 1999
28,558
3
81
Damn I was about to mentioned it was hosted at OSU. Someone is getting busted or really smart.
 

Kenny

Platinum Member
Oct 12, 2002
2,567
0
76
Originally posted by: WhiteKnight
Well I hope that whoever this is at OSU has a good time with my fake submissions.

Same here. I'm putting "gradserver.ads.orst.edu" as the login and for the pw I put stuff like, "LOL YOU ARE SO SCREWED BUDDY! AHAHAHAHAHAHAHAHAHAHAHAH"

The password box looks like you can put unlimited text.
 

bradachj

Junior Member
Jul 17, 2003
1
0
0
Hello,
I checked out the machine and it appears that someone in that department didn't do a great job of securing it. :) We kicked it off the network until they get it fixed. I don't think it was someone here that was doing it, but that department will examine the machine and hopefully come up with something. The traffic logs didn't seem to have a pattern to indicate if whatever was collected was being picked up at regular intervals from a specific address, or simply relayed to the miscreant who set that up.

At any rate, thank you to Patrick P. for emailing us about this.

--
------------------------------------
Jack Bradach
bradachj@net.oregonstate.edu
Network Security Analyst (Assistant)
Network Engineering
Oregon State University
Corvallis, OR 97331
Desk Phone: 541.737.8513
------------------------------------