1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Ebay Scam!!!

Discussion in 'Virus & Other Malware Removal' started by adamf14, Sep 10, 2004.

Thread Status:
Not open for further replies.
  1. adamf14

    adamf14 Thread Starter

    Joined:
    Jun 13, 2004
    Messages:
    17
    My aunt was sent this email earlier today:

    You have received this email because we have strong reason to believe that your eBay account had been recently compromised. In order to prevent any fraudulent activity from occurring we are required to open an investigation into this matter. To speed up this process, you are required to verify your eBay account by following the link below.



    (To complete the verification process you must fill in all the required fields)


    Please Note: If your account informations are not updated within the next 72 hours, then we will assume this account is fraudulent and will be suspended. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud.


    We appreciate your support and understanding, as we work together to keep eBay a safe place to trade.

    Thank you for your attention on this serious matter. We apologize for any delay in resolving this situation.


    Regards,


    Morris Franklin
    eBay SafeHarbor
    Investigations Team


    Here is the properties of the email message: (removed by moderator is my aunts email)

    Return-Path: <[email protected]>
    Received: from psmtp.com ([12.158.36.80]) by removed with SMTP
    id <removed>
    for <removed>; Fri, 10 Sep 2004 04:05:16 -0400
    Received: from source ([65.210.34.6]) by exprod6mx96.postini.com ([12.158.35.251]) with SMTP;
    Fri, 10 Sep 2004 01:05:10 PDT
    Received: from proxy2 (proxy2 [127.0.0.1])
    by localhost.localdomain (8.11.6/8.11.6) with SMTP id i8A7om720081
    for <removed>; Fri, 10 Sep 2004 03:50:48 -0400
    Message-Id: <[email protected]>
    Content-Type: text/html; charset="iso-8859-1"
    Date: Fri, 10 Sep 2004 03:50:48 -0400
    Content-Transfer-Encoding: quoted-printable
    Subject: TKO Notice: Urgent Fraud Investigation
    To: removed
    From:
    [email protected]
    Mime-Version: 1.0


    As soon as i see the link i know that this is a scam. When you go to the ip address (removed) that is in the link; it shows about 50 pictures. My question is how do i get the source of this message? I would love to email this scammer....

    Thanks,
    Adam
    removed
     
  2. dvk01

    dvk01 Moderator Malware Specialist

    Joined:
    Dec 14, 2002
    Messages:
    56,253
    First Name:
    Derek
    Don't do anything stupid

    Just forward the email to [email protected] and they will deal with it and get the offending website closed quickly

    they have the muscle to deal with these scum quickly, legally and efficiently. We don't, it's a waste of time trying to retaliate yourself and makes matters worse

    I have removed all email adresses and IP identification from the post to prevent being spammed and removed the link as it leadds to a page containing a password stealing trojan that is capable of being activated just by visiting the page if your security settings are set too low
     
  3. adamf14

    adamf14 Thread Starter

    Joined:
    Jun 13, 2004
    Messages:
    17

    Already Done!
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/272607

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice