Friday, December 9, 2005

Phony email tricks eBay

A sophisticated phishing attack has proven so successful, it <A HREF="http://news.yahoo.com/s/pcworld/20051206/tc_pcworld/123842">has tricked eBay's own fraud investigations team</A> into endorsing it as legitimate, according to an independent security consultant who reported the attack to eBay. In late November, Richi Jennings received a fraudulent e-mail message containing the subject line "Christmas is Coming on ebay.co.uk." Offering him "great tips for successful Christmas selling," the message directed him to the Web site ebaychristmas.net, which then asked Jennings to enter his eBay user name and password, as well as the name and password for his e-mail account. Jennings reported the site to eBay on November 25, and four days later he got a note back from the company's investigations team claiming that the e-mail message was, in fact, "an official e-mail message sent to you on behalf of e-Bay."

News Timeline



From Our Sponsor