eBay Phishing Scheme
Upon sitting down at my desk just now it appeared that I had email from an eBay user named ‘yuki668’ asking simply “Hello,do you accept PayPal?”. This seemed a bit fishy, so I decided to dig into it a little bit.
Come to find out, it’s the best made phishing scheme that I’d not yet seen. It appears to look like valid email from eBay, takes you to a look-alike login page, allows one to compose a reply, and even appears to send the message, then offering to redirect the user to My eBay and various other pages.
Here are some screenshots of this message and the hosted false pages:
· Original email from ‘yuki668’ asking a ‘question’.
· Fake eBay login page.
· Fake message composition page.
· Fake sent message confirmation.
I have to say, with my actively selling something on eBay, this almost fooled me. The way I knew it not to be right, is the original email message was sent, it didn’t say that it was a question about a particular item…
Anyway, here is the full header if the email, if you are curious: Continue reading: Clicky Clicky


