Spoof login page on ebay - very clever.
Spoof login page on ebay - very clever.
Author
Discussion

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
Beware items which take you to the ebay signin page. There is a clever scam going on, the real url is masked by a borderless popup with the usual https://signin.ebay.co.uk url and successfully stolen accounts are then used to set up other id scamming auctions. Very clever, and easy to fall for.

[URL REMOVED]

Ah ok, someone else got here before giving me the chance to do the job myself. The usual pistonheads good grace.

Anyway, for those interested, here's a screenshot of the bogus login page and the item number of the auction which produced it. Go off pistonheads to ebay and try it without endangering Petrol Ted's livelihood if you want to try it for yourself, notwithstanding the disclaimer below

www.tallbloke.net/spoof-login.gif

produced by ebay item 8007756264

NUMPTY WARNING
BEWARE!!! DO NOT SIGNIN WITH YOU REAL EBAY ACCOUNT DETAILS ON THE LINK PRODUCED BY ENTERING THIS ITEM NUMBER ON EBAY'S SITE!!!!

EDITED TO ADD:

IF YOU ARE PARANOID ABOUT VIRUSES, POPUPS, GOBLINS, BILL GATES ETC, WRAP YOUR COMPUTER IN COTTON WOOL NOW AND PUT IT IN A DARK QUIET ROOM. DON'T CLICK THE LINK OR WE'RE ALL DOOMED!

>> Edited by tallbloke on Thursday 20th October 20:41

>> Edited by Kinky on Thursday 20th October 20:58

>> Edited by tallbloke on Thursday 20th October 21:08

up-the-dubs

4,282 posts

249 months

Thursday 20th October 2005
quotequote all
WOW! Norton antivirus did NOT like that page. It's virused up the wazoo! Trojans (as far as I could see) all over it.

timmy30

9,325 posts

247 months

Thursday 20th October 2005
quotequote all
up-the-dubs said:
WOW! Norton antivirus did NOT like that page. It's virused up the wazoo! Trojans (as far as I could see) all over it.


Yup same with McAfee, if any of you guys don't have AV or are unsure I'd suggest you don't open that link.

paolow

3,257 posts

278 months

Thursday 20th October 2005
quotequote all
i use spycatcher and to its credit it too explained exactly what was going on. very clever on both sides...

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
up-the-dubs said:
WOW! Norton antivirus did NOT like that page. It's virused up the wazoo! Trojans (as far as I could see) all over it.


Was it norton AV which complained or Norton Internet Security?

dougc

8,240 posts

285 months

Thursday 20th October 2005
quotequote all
Might want to put a warning on your post tallbloke for people who aren't running up to date virus software. Norton just had a fit when I clicked the link!.

Hilts

4,633 posts

302 months

Thursday 20th October 2005
quotequote all
Hmmm might have to look at Spycatcher.

I'm running KAV, ZAP and Stopzilla and no warnings flashed up. I have other stuff as well and just checked my system, it's clean.

Anyway I just logged in and it let me in.

User ID - Michael Mouse
Password - Funk you scamming asswipes.

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
timmy30 said:

[quote=up-the-dubs] if any of you guys don't have AV or are unsure I'd suggest you don't open that link.


DISCLAIMER

If the link I posted causes your computer to explode, setting fire to your house and taking the entire district with it - Don't sue me. OK?

XM5ER

5,094 posts

268 months

Thursday 20th October 2005
quotequote all
Nice one, i've got to do a scan now FFS.

Burk!

up-the-dubs

4,282 posts

249 months

Thursday 20th October 2005
quotequote all
tallbloke said:

timmy30 said:
if any of you guys don't have AV or are unsure I'd suggest you don't open that link.



DISCLAIMER

If the link I posted causes your computer to explode, setting fire to your house and taking the entire district with it - Don't sue me. OK?


Might be an idea putting the discalimer on the first post, or even delete the link and regail us all with the story there-in?

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
Hilts said:

User ID - Michael Mouse
Password - Funk you scamming asswipes.



I used

user: Phishing_for_a_good_time
pass: starts_with_casting_in_your_line

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
up-the-dubs said:

Might be an idea putting the discalimer on the first post, or even delete the link and regail us all with the story there-in?


I think the NUMPTY WARNING is sufficient, there are no viruses or trojans embedded as far as I can see. Obviously if anyone wants to differ fair enough, but in the interests of informed debate, removing the link which enables people to check it out seems a bit self defeating.

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
XM5ER said:
Nice one, i've got to do a scan now FFS.

Burk!


Easy fella. Let me know if you find any you can attribute to this page ok? I wouldn't have posted the link at all unless I'd checked it out.

victormeldrew

8,293 posts

297 months

Thursday 20th October 2005
quotequote all
You could just extend you numpty warning to add a caution about AntiVirus. Just to be helpful. We wouldn't want anyone to think you were delibarately trying to spread malware now would we?

Hilts

4,633 posts

302 months

Thursday 20th October 2005
quotequote all
XM5ER said:
Nice one, i've got to do a scan now FFS.

Burk!

No-one made you click you on the link and if you're now worried about your system then it's obviously pre-emtively not up to scratch.

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
victormeldrew said:
You could just extend you numpty warning to add a caution about AntiVirus. Just to be helpful. We wouldn't want anyone to think you were delibarately trying to spread malware now would we?


Good Grief!

I don't bellieeeeeve it.

There is no need for a virus warning because there are no viruses. ok?

I'd ask those who say their AV programs are throwing alerts to check carefully again to see if it's the security component rather than the AV component which is causing the flag-ups.

XM5ER

5,094 posts

268 months

Thursday 20th October 2005
quotequote all
Hilts said:

XM5ER said:
Nice one, i've got to do a scan now FFS.

Burk!


No-one made you click you on the link and if you're now worried about your system then it's obviously pre-emtively not up to scratch.


I clicked the link to see the scam in order to make sure I dont get scammed myself. Having not been phished for ebay details before and since I've been using it a lot lately I thought it may be useful.

As for my system not being up to scratch, well shit, now I know eh? New copy of NIS fully up to date and functional obviously isn't enough.

Kinky

39,883 posts

289 months

Thursday 20th October 2005
quotequote all
I'd suggest editing the original link and add a statement BEFORE the link itself that it's potentially virused up to the hilt.

You can never be sure that everyone who clicks the link is up to date on virus updates/checkers, security settings, etc, etc, etc ....

K

>> Edited by Kinky on Thursday 20th October 20:41

rich 36

13,739 posts

286 months

Thursday 20th October 2005
quotequote all
Wow, why diden't you warn me!!!!!!

My computer has just blown up and caught on fire, and now my house has also well alight, taking the entire area with it,
Some people sheeesh'

tallbloke

Original Poster:

10,376 posts

303 months

Thursday 20th October 2005
quotequote all
Kinky said:
I'd suggest editing the original link and add a statement BEFORE the link itself that it's virused up to the hilt.

You can never be sure that everyone who clicks the link is up to date on virus updates/checkers, etc, etc ....

K


Care to tell us which virus you found?

No?

Didn't think so.

Anyway, just to keep you happy, I've added an extra health warning, OK?