Pistonheads classified messaging used for phishing?

[gavgavgav]

Just received this message from pistonheads about a car I'm selling, the link is to another server with the log in screen, it's a good copy of your website;

Message:
" Hi,
Is this your car?

Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-land-rover-series-----2721014
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks "

Advert link: http://www.pistonheads.com/classifieds/used-cars/l...

[RacingPete]

Can you PM me the email address you received this from so we can block the sender - will put in plan our process to get phishing sites removed.

Thanks for the info

[Pixelpeep7r]

friend of mine got one of these too although slight variation.

It said, they want to buy the car but they've seen an identical advert for the same car at half the price.

They offer a link which is constructed the same way but is obviously not on the PH domain.

It takes you to a fake PH login page asking for you your u/n and p/w to continue.

[RacingPete]

Unfortunately it is a common problem with lots of major sites (ebay/paypall/autotrader) - as we have tightened security, the easiest way to get a username and password is to ask someone for it.

We try to keep http://www.pistonheads.com/gassing/topic.asp?h=0&a... up to date with the latest issues... so please check.

[gavgavgav]

RacingPete said:

Can you PM me the email address you received this from so we can block the sender - will put in plan our process to get phishing sites removed.

Thanks for the info

Super, PM sent with full email.

[RacingPete]

gavgavgav said:

Super, PM sent with full email.

Got it.. thank you.

[capriesta]

Hi, I'm new to the forum and saw your thread. I also picked up a similar mail today which looks like the same scam, I reported it to "[e-mail]" this evening - What would the possible scammers be able to do if they hacked my account as I currently have a car for sale? Any advice? I have changed passwords etc but am I best to end the sale?
Message:
" Hi,
Is this your car?
Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-ford-series-----2645953
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks
"

[RacingPete]

capriesta said:

Hi, I'm new to the forum and saw your thread. I also picked up a similar mail today which looks like the same scam, I reported it to "[e-mail]" this evening - What would the possible scammers be able to do if they hacked my account as I currently have a car for sale? Any advice? I have changed passwords etc but am I best to end the sale?
Message:
" Hi,
Is this your car?
Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-ford-series-----2645953
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks
"

The typical mode of the scammer if they get access to an account is to change the price and add pictures with email stamps in, change the details and get people to try and email them directly from the site. So using a genuine advert to try and hijack the fact it has been through all the moderation checks to get scam info up to con buyers.

If you have changed your password then all should be fine.

Check out more of the current scams here -> http://www.pistonheads.com/gassing/topic.asp?h=0&a...

[capriesta]

Thanks for reply , Someone else has looked into this for me tonight and it appears to be a scam to obtain payment details. The next screen shows the following
"During our regularly scheduled account maintenance and verification procedure we have detected a slight error in your PistonHeads online account.
This might be due to the following reasons:
- An inability to accurately verify your selected option of payment due to an internal error within our systems.
We apologise and ask you to update your credentials:"

---

Luckily I never got this far but the whole set up looks very professional to trap people into releasing more personal details. I will also keep an eye out on my advert to make sure they are not tampered with. Anyway thanks for now

[varptr]

Just received one as well (today November 12th).

[RacingPete]

varptr said:

Just received one as well (today November 12th).

If you can drop our classified administrator an email (PM her from her profile here = http://www.pistonheads.com/gassing/profile.asp?h=0... ) then we can get the email address blocked

[Terminator X]

I just deleted them when my car was for sale. Don't click links from random people as a rule

TX.

[varptr]

RacingPete said:

If you can drop our classified administrator an email (PM her from her profile here = http://www.pistonheads.com/gassing/profile.asp?h=0... then we can get the email address blocked

Done that thanks.

[Pixelpeep7r]

varptr said:

RacingPete said:

If you can drop our classified administrator an email (PM her from her profile here = http://www.pistonheads.com/gassing/profile.asp?h=0... then we can get the email address blocked

Done that thanks.

from a broken link? Impressive.

[varptr]

Pixelpeep7r said:

from a broken link? Impressive.

Just removed the trailing ")"

[Pixelpeep7r]

varptr said:

Pixelpeep7r said:

from a broken link? Impressive.

Just removed the trailing ")"

even more impressive !!

[Richyboy]

Just received this email today also.

This email enquiry has been sent from [e-mail] and all replies should be sent to this address.

Someone has sent you a message:

Email: [e-mail]

Name:

Phone:

Message:
" Hi,
Is this your car?

Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-toyota-autos-series-----3103382
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks "

[RacingPete]

Richyboy said:

Just received this email today also.

This email enquiry has been sent from [e-mail] and all replies should be sent to this address.

Someone has sent you a message:

Email: [e-mail]

Name:

Phone:

Message:
" Hi,
Is this your car?

Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-toyota-autos-series-----3103382
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks "

Cheers - have blacklisted and notified any people who that email address has contacted.

[Richyboy]

Received the same message again:

When responding to this email please ensure that you do not reply to [e-mail] as this is a no-reply address and will not reach the seller.

This email enquiry has been sent from [e-mail] and all replies should be sent to this address.

Someone has sent you a message:

Email: [e-mail]

Name:

Phone:

Message:
" Hi,
Is this your car?

Link: tny.de/ww-piston-heads-com-clasifieds-used-cars-toyota-autos-series-----3103382
(if the link does not work copy and paste it into a new tab)
I am very interested in purchasing but first i want to make sure.
Thanks "

[RacingPete]

Will check out how that has bypassed our fraud checks and blacklists...