[SFCC] Fwd: Phishing attacks to get my eBay account information

  • From: biglta1@xxxxxxxxxxx
  • To: sfcc distribution <sfcc@xxxxxxxxxxxxx>
  • Date: Mon, 27 Feb 2012 11:49:42 +0000 (UTC)




From: "Buzz Brooks" <buzzbro@xxxxxxxxxxx>
To: "Brian Wilson" <biglta1@xxxxxxxxxxx>
Sent: Sunday, February 26, 2012 11:14:41 PM
Subject: Phishing attacks to get my eBay account information

Brian,

 

I am seeing more & more attacks trying to get account information regarding my Amazon, eBay and various bank/investment accounts. 

 

If you think this would help our members be aware of this type of hacking you are welcome to forward this email to the SFCC list.

 

Buzz

 

1.  Here is the original email sent to me (spoofed to look like it came from eBay) with an attachment that I didn’t open.  Looks real doesn’t it? I highlighted the warning flags that raised my suspicion. Note the poor English – “has blocked” vs. “has been blocked” and “Paypal vs. PayPal”.

 

From: PayPal [mailto:no-reply@xxxxxxxxxx]
Sent: Sunday, February 26, 2012 12:56 PM
To: Recipients
Subject: Update your PayPal account !

Attached: Secure form.html (25 KB)

Description: PayPal

Description: //images.paypal.com/en_US/i/scr/scr_emailTopCorners_580wx13h.gif

Description: //images.paypal.com/en_US/i/scr/pixel.gif

Dear Paypal Member,

This email informs you that your credit card associated with your account has
blocked 
as a security measure.

Here’s what we have on file for you. Take a second to confirm we have your correct information.

Please download and complete the attachment to update your account and keep shopping with PayPal.

Sincerely,
PayPal

 

Description: //images.paypal.com/en_US/i/scr/pixel.gif

Description: //images.paypal.com/en_US/i/scr/scr_emailBottomCorners_580wx13h.gif

 

This email was sent by an automated system, so if you reply, nobody will see it. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page.

Copyright © 2012 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.Description: https://paypal.112.2o7.net/b/ss/paypalglobal/1/H.22--NS/1796168455?c6=5E059705FM8215227&v0=PP1478_1_53893&pe=lnk_o&pev1=email&pev2=D=v0&events=scOpen

PayPal Email ID PP1478

2.  Here is the email I sent to eBay’s security department.

 

From: Buzz Brooks [mailto:buzzbro@xxxxxxx]
Sent: Sunday, February 26, 2012 6:22 PM
To: Spoof (spoof@xxxxxxxx)
Subject: FW: Update your PayPal account !

 

Here is another spoofed email pretending to be from eBay.

 

3.  Here is the response back from eBay’s security department.

 

Other related posts:

  • » [SFCC] Fwd: Phishing attacks to get my eBay account information - biglta1