[Premium-Rx] Be Careful: The eBay HF1000 Phishing Scam

[stephous]

We have all seen the fraudulent auctions like the eBay HF1000 auction. The
fraudsters are getting good at stealing our money and our ID's. It's easy to
fall prey. How do they do it?


1) Stealing your ID: I just got an eBay email which looks like a genuine
eBay message. I don't know the user so I decide to log on. Do I use the eBay
page sent to me? It looks like eBay. I decide to log on to eBay securely.
H'mmm, no messages! What's up? Look at the differences between the two
sites:

a. ftp://0x26.0xc0.0x1f.0xcd/eBayISAPI.dll
This is not eBay. It's a nearly perfect duplicate of the eBay sign on page.

b.
https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&co_partnerId=2&siteid=0&ru=http%3A%2F%2Fmy.ebay.com%3A80%2Fws%2FeBayISAPI.dll%3FMyeBay%26_trksid%3Dm37%26MyEbay%3D%26guest%3D1&pageType=1883
This is eBay

If you responded using site a. you just gave the fraudster your ID. The
similarities between the two sites are nearly undetectable.


2) The HF1000 scam keeps on running. They ask you to pay for the item
outside of eBay. You get a huge discount. Goodbye $$$. The scamsters ask for
money orders, bank accounts, credit cards, and your ID's. There is no limit
to what they will do. In the end you lose.


It's a good idea to trade with people you know.


Be Careful,
Steve Pappin