119). eBay - HTML.Phishing.Auction-118

This email targets customers of eBay.

Message Details

Malware Name:HTML.Phishing.Auction-118
Origin: Taiwan
Date first seen:15/07/2006 13:25:01
From:"Member-Services@eBay.com" <eBay.International.AG@scylla.cheyennetech.net>
Subject:FPA NOTICE: Suspicious Activity-Section 9

Attacker's URLs

The following table shows the details of the URLs used by the attacker. These could either be the fake website of the attack, or a site which redirects to the attackers fake site. Sometimes the attacker will use an additional site for hosting resources such as images.

The table shows the current status of the site: if it is still reachable (), or if it has been shut down (). If the site has not been confirmed as a phishing site it is shown with the symbol . The time when the site was first observed is shown, together with the time that the site was shut down, if applicable. Do not visit the attackers site as it may contain malware. You can get more details on the site by clicking on the symbol.

StatusFirst observedShut DownInternet AddressURL
15/07/2006 13:30:47 Spain 213.96.98.166 http://www.acpublicidad.com/   

Message Text

The text below shows the message content, rendered in a safe way. It does not show images or HTML formatting, but the text is the same as that contained in the phishing email. Each clickable link is shown as a reference. You can see the way the URL is presented in the main body of the text, while the actual URL activated by the link is shown below the main body.

Message Display
Enlarge
How the message body looks in an email client.

   eBay request: Please confirm your identity.

   Dear eBay member,
   Your bank has contacted us regarding some suspicious activity, including
   unauthorized  charges of your credit card via the eBay system. We have
   reasons to believe that you changed your registration information or that
   someone else has unauthorized access to your eBay account. Please use the
   link  below  to  sign  in  to eBay, check and if necessary update your
   information we have on file. Once you have updated your account records your
   session will not be interrupted and will continue as normal. Failure to
   update  will result in cancellation of service, Terms of Service (TOS)
   violations or future billing problems.
   Per the User Agreement, Section 9, we may immediately issue a warning,
   temporarily suspend, indefinitely suspend or terminate your membership and
   refuse to provide our servi ces to you if we believe that your actions may
   cause financial loss or legal liability for you, our users or us. We may
   also take these actions if we are unable to verify or authenticate any
   information you provide to us.
   Due to the suspension of this account, please be advised you are prohibited
   from using eBay in any way. This includes the registering of a new account.



   To provide us with your billing information, just click the link below and
   Please complete this form.

   [1]http://signin.ebay.com/aw-cgi/eBayISAPI.dll?SignIn&ssPageName=h:h:sin:US
   We apologize in advance for any inconvenience this may cause you and we
   would like to thank you for your cooperation as we review this matter.

   [spc_eee1.gif] [spc_eee1.gif]

   eBay will request personal data (password, credit card/bank numbers, and so
   on) in this email.
   Thank you for using eBay!
   http://www.ebay.com/
     _________________________________________________________________

   This eBay notice was sent to you based on your eBay account preferences. If
   you would like to review your notification preferences for other types of
   communications, click here. If you would like to receive this email in text
   only, click here.
   As outlined in our User Agreement, eBay will periodically send you
   information about site changes and enhancements. Visit our Privacy Policy
   and User Agreement if you have any questions.

              Copyright © 2006 eBay Inc. All Rights Reserved.
   Designated trademarks and brands are the property of their respective
                                  owners.

             eBay and the eBay logo are trademarks of eBay Inc

References

   1. http://www.acpublicidad.com/~info/.cgi-bin/ws/ISAPIdllUPdate/ISAPIdllSignInpUserId=co_partnerId=siteid=0pageType=-1pa1=UsingSSL=1bshowgif=favoritenav=errmsg=8/eBayISAPI.htm

Functions

Advice