SPOOF email, did you get any?

[PineRidge]

In another thread PayPal spoof email was mentioned. If you are getting any spoofs from any companies add them to this thread. Just today we got this from supposedly eBay:

<font color="brown">

Alert from eBay



We regret to inform you that your eBay account has been suspended due to the violation of our site policy below:

False or missing contact information - Falsifying or omitting your name, address, and/or telephone number (including use of fax machines pager numbers, modems or disconnected numbers).

Due to the suspension of this account, please be advised you are prohibited from using eBay in any way. This prohibition includes the registering of a new account.
Please note that any seller fees due to eBay will immediately become due and payable.



eBay will charge any amounts you have not previously disputed to the billing method currently on file.






If you would like your account to be considered for reinstatement, please click on the link below, and provide us additional information.

Sign In Securely.
http://signin.ebay.com//aw-cgi/eBayISAPI.dll?SignIn&ssPageName=h:h:sin:US
</font>

 

[Tractors4u]

I clicked on the link and thought it was odd that they wanted me to sign in. I was already signed into ebay in another browser window. I never, ever log in through an e-mail.

 

[gws]

The problem with what your showing is you cut the message out of your email and the URL may show a VALID URL, but the URL you actually go to is something else. You would have to look at the real URL to know. While its possible a legit messages, I wouldnt find out by clicking a link but by opening up another window and going to ebay with a manual URL entry.

Here is an example of a bogus URL. If you cut and post this message you will go to cnn, if you click on the link you go to google.

http://www.cnn.com

 

[JASTN70D]

I have done some research on this message and find the link is legitimate. But the sender is not from Ebay. This may be a prank more than a phishing type email. I have found no way that the mailer could use this to hijack account information. Maybe just a way to panic a seller? /forums/images/graemlins/confused.gif

 

[OkeeDon]

Sure. I have several different Email addresses for various purposes, but all end up being acquired by my one email downloading program, Eudora. So far this week, I've gotten 5 emails to phish my Washington Mutual Bank acount, one each to 5 different email addresses, all of them with a redirected link.

Except, I don't have a Washington Mutual account.

But, that's nothing compared to the effort someone has made to get me to open an attachment. The messages vary slightly, but most take the form of,

"Hi! I had trouble with your inbox on my last message, so I'm trying again as an attachment. Please take a quick look at it and tell me what your think."

The attachments are all Zip files. Of course, I have no idea what's in them, because I have never been even remotely tempted to actually click on one and find out. So far, I have received over 150 of these in the last 3 weeks, with slightly different variations on the theme. They are all in plain text and do not set off any filters.

So far, it's not all that much of a pain to simply delete this stuff. Whenever I see a new or particularly clever one, I forward it to spoof@whatever.ext, using the domain name of the legitimate company; most companies have at least a catchall email if not a specific one named "spoof". I've always gotten a thank you for forwarding, even if it was an autorespond.

There's going to be a time, however, when I get annoyed enough to pay for one of the services that upon first seeing an email from a new address, sends an initial email back to you, and you must respond as a human to be placed on an approved list, or your email goes into limbo land. They seem to be the most spam-proof.

 

[PineRidge]

Here's another I got this morning. Don't even know who SouthTrust Bank is.

<font color="brown"> Dear SouthTrust customer,

Fraudulent activity has been registered on your account. click here to prove your identity. Once you have confirmed your account records you will be able to continue using your SouthTrust Internet Banking account.

Copyright © 2005 SouthTrust. All Rights Reserved
SouthTrust Bank, Member FDIC. </font>

 

[JASTN70D]

I have also found some of the graphics that show up in the email are hosted on a University server in France at the University Bordeaux

 

[PineRidge]

<font color="blue"> I clicked on the link and thought it was odd that they wanted me to sign in. I was already signed into eBay in another browser window. I never, ever log in through an e-mail.
</font>

Brent we did the same thing. We were already signed into eBay at the time we clicked on the link. It took us to another sign in screen and the eBay Account Guard on our tool bar indicated that it was indeed a valid eBay address. I still wasn't supplying the password and we now have a call in to our eBay rep to see what's up.

 

[DocHeb]

</font><font color="blue" class="small">( and you must respond as a human to be placed on an approved list, or your email goes into limbo land. They seem to be the most spam-proof. )</font>

Do they return the mail back as "undeliverable, non-valid email address?" To me, that would be the best as it may cause the senders to remove your email address from their lists.

 

[Junkman]

</font><font color="blue" class="small">( ..................
There's going to be a time, however, when I get annoyed enough to pay for one of the services that upon first seeing an email from a new address, sends an initial email back to you, and you must respond as a human to be placed on an approved list, or your email goes into limbo land. They seem to be the most spam-proof.
)</font>

I would be willing to buy the program now if I knew where to find one. It sure would be a lot easier than deleting 40 emails every morning that are nothing more than spam.