Beware - Scam variation (phishing attack)

[flashgit]

I have an advert to sell my car on Pistonheads and another site.
This afternoon I received a text from one person asking me to provide to their "brother" with the expiry dates of Tax and MoT (these were outlined in the advert) and also the VIN number so "he" could check the history.
I sent an eMail saying the VIN number would be provided when I knew a name and had a direct contact number.
I got an eMail back asking me to check if we were talking about the same advert - THE LINK IN THE RESPONSE EMAIL WAS NOT TO EITHER ADVERT. Looked like it was a phishing scam to get email and password.

[TheEnd]

Or he was looking for details on lot of cars, and forgot which guy you were.

[Little Lofty]

Had this twice last time I advertised on here, their link took me to a fake Pistonheads page where I was expected to log in, I didn't but some probably do, not sure what they can do with your log in details but must be worth their while.Maybe that's why you see so many adverts that look quite genuine but with silly cheap cars?

[Dammit]

Most people use the same password for everything, and if they can guess your email address/it's listed in your account settings then you have just given up pretty much everything.

[JimmyTheHand]

Little Lofty said:

Had this twice last time I advertised on here, their link took me to a fake Pistonheads page where I was expected to log in, I didn't but some probably do, not sure what they can do with your log in details but must be worth their while.Maybe that's why you see so many adverts that look quite genuine but with silly cheap cars?

It is likely the same email address & password is used on other sites in many cases - makes the information more valuable.

[996TT02]

flashgit said:

I have an advert to sell my car on Pistonheads and another site.
This afternoon I received a text from one person asking me to provide to their "brother" with the expiry dates of Tax and MoT (these were outlined in the advert) and also the VIN number so "he" could check the history.
I sent an eMail saying the VIN number would be provided when I knew a name and had a direct contact number.
I got an eMail back asking me to check if we were talking about the same advert - THE LINK IN THE RESPONSE EMAIL WAS NOT TO EITHER ADVERT. Looked like it was a phishing scam to get email and password.

What sort of link did you get?

[flashgit]

Apologies for late response to all....

Got another one last weekend and the link was something like "http://ab.cd/SCAM"

Some actually are cleverer than this and they look like pistonheads.com URL's, but being in the fraud detection industry, I have tools available to decipher.

The most common thing to look for is a question mark part way through a URL that is followed by another "http://....URL.Com" - this second URL is actually where the link will take you.

I never follow the links unless I am happy that they really are genuine.

BTW - this is the car that is for sale in case anyone is interested or knows someone who is looking :-)

http://www.pistonheads.com/classifieds/used-cars/m...

Edited by flashgit on Tuesday 6th May 16:23

[TheEnd]

You don't need to post up the scam link...

[flashgit]

Edited :-)