OT:Ebay Security

[Foofoogal]

This may need to be moved as I don't know where to put it.
I have been selling online since 2002 and even had an ebay store.
I just wanted to let everyone here on FL to be very careful. The scammers are out in full force and getting very good at what they do.
I had to contact security on ebay last night as there was a bogus email sent to my email box within my account at ebay. I am not talking about one sent to my regular mailbox or yahoo or whatever. I am speaking of inside my mail. I was told by security that this is now happening. So an innocent question like "do you have another one" or "another size" can come with a link leading to a bogus site. Just don't ever open any link anywhere you do not know where it is from. Always look for the padlock or https in the url. The s means secure. Ebay will also never contact you without using your name.
Here is a link the security sent to me. Hope it helps.
-----------------
http://pages.ebay.com/help/tutorial/accountprotection/js_tutorial.html
If you don't want to push on the link just go to ebay and find it easily I am sure since I am stating not to open links. :eusa_doh:
I had my credit used by someone a few years back and it was no fun to straighten out. Thanks. Sandy

 

[nightandthecity]

thanks for the warning, well worth knowing.

 

[Undertow]

With the recent eBay topics, just thought I would bump this one and see if there's been any resolution or similar problems.

 

[scotrace]

I got an email today that looked convincingly like it was from Hallmark.com. "You have an online greeting card waiting at Hallmark.com." The company logo was used, and many of the links worked and would send you to Hallmark's website. However, the "Click here to see your card," when clicked, downloads a malicious executable file.

Really, really dastardly and evil. I'm sure a lot of people get snagged. It's the best-crafted bit of phishing I've seen yet.

 

[ScarlettTurner]

The "You just received an e-card from...", is big right now.

I regularly get, "You just received an e-card from a school friend, suitor, long-lost family member," or whatever --- they are trying to get you to click on the link that's in there --- I just delete without reading them.

 

[Matt Noir]

Here is a tip - if you hover your mouse over the link in question, it will usually show a bogus address (usually displaying an IP address instead of the actual URL).

Just remember, no one at places like eBay or PayPal will ever ask for your username, password, credit card or other financial information.

Regards,

Matt

 

[Diamondback]

If you're running Firefox, some security addons are good for helping fight this stuff too. I usually use:
PhishTank: Warns if a site is a "phishing" scam, like what Matt described)
McAfee SiteAdvisor and WOT: Trustworthiness of the site
KeyScrambler:encrypts keystrokes, in case somehow you get a keylogger

What Scarlett just reported, I just go straight to "Report as Spam" on those.

Good to see several of us are IT-security-conscious.

 

[Foofoogal]

Basically don't ever open a link to anywhere from anyone unless you know the person real well. The funny things etc. people send to each other to everyone in their address book is another big way for spammers to harvest email addresses.

 

[Undertow]

Some people call me a big jerk but I really never cared for those online cards anyhow. Thanks for the heads up Scotrace!

I don't even bother to click links if someone has sent them. I'll click a link at the FL because I trust it, but that's about as far as I go with links.

 

[scotrace]

Oh, I click them sometimes. Download the junk, open up the file to see what it does. Then toss it.

Like Superman with bullets.

 

[Diamondback]

This is one good thing about Mac--most of this crap is targeted on PC's using MS Internet Exploder, which is why I prefer Firefox, Opera and other "not totally mainstream" browsers.

How many iCents per iShare d'you think you gained off my comment, Scott?lol

 

[panamag8or]

I recently sold a high-dollar item on the bay, and the winning bidder recieved an email from someone claiming to be me, and asking for his shipping info. Then they said that new payment instructions would be coming from eBay. Luckily, he didn't fall for it, and the sender had a different username and email address, so we reported him. However, I immediately went to my account and changed my password, just in case.

 

[scotrace]

Geez! That's really rotten!

 

[Undertow]

I recently sold a high-dollar item on the bay, and the winning bidder recieved an email from someone claiming to be me, and asking for his shipping info. Then they said that new payment instructions would be coming from eBay. Luckily, he didn't fall for it, and the sender had a different username and email address, so we reported him. However, I immediately went to my account and changed my password, just in case.

Now that sounds scary. Really scary.

 

[Samsa]

The "You just received an e-card from...", is big right now.

I regularly get, "You just received an e-card from a school friend, suitor, long-lost family member," or whatever --- they are trying to get you to click on the link that's in there --- I just delete without reading them.

I get about two of these a day.

 

[Twitch]

My wife got a bogus Ebay/PayPal email the other day on her work email and she doesn't even have an account on either.

 

[Diamondback]

I get those every now and then myself. Straight to the "Report as Spam" folder...

 

[panamag8or]

I recently sold a high-dollar item on the bay, and the winning bidder recieved an email from someone claiming to be me, and asking for his shipping info. Then they said that new payment instructions would be coming from eBay. Luckily, he didn't fall for it, and the sender had a different username and email address, so we reported him. However, I immediately went to my account and changed my password, just in case.

Now that sounds scary. Really scary.

What the ebay community boards suggested was to never open a question from a buyer (or prospective bidder) from the email notice that ebay sends to you. If you get one, log into your account, and read the message from within the eBay message system itself.