Friday, April 20, 2007

Security Advisory: New eBay Fraud Method Detected

After a somewhat lengthy absence caused by work overload, we're back with a promise to constantly update this blog with exciting new stuff -- but first things first, and that is a security advisory concerning a new online fraud method involving eBay.
This technique of the never-tiring fraudsters involves sending an unsuspecting eBay seller a message purportedly related to some sale debate. Typically, it would resemble a proper eBay message and read something like, User so-and-so has left you a message... Please click here to respond... The link would then take a seller to a fake site reproducing eBay graphics and designed to learn eBay account password and other sensitive information.
As usual, the best way to recognize a fraudulent e-mail is to carefully check the eBay number of bogus "disputed item", or right-click on e-mail headline and hit "Properties", which would give a very good idea where mail really came from. The same procedure can be repeated with the actual link contained in the e-mail without any attempt at opening it. It is crucial not to attempt to open any links in any suspicious mails; sellers should remember that communication concerning any trading disputes or questions from potential buyers should better be conducted from the eBay site.

No comments: