[Mccoypottery-talk] Ebay Spoof

[lisa a]

The eBay reverse lookup system is handy but it makes it awfully easy to 
compile effective "known target" phishing attacks. I don't have to be smart 
enough to hack the database; just motivated enough to use the Find Member 
page over and over.

I am platform neutral -- have Windows and Mac. Cannot be bothered to learn 
anything else (would rather pet the dogs than learn Unix). BUT if you happen 
to use Windows/Windoze/whatever you want to call it, it is worth keeping 
current with the latest security updates. They are released every second 
Tuesday of the month. If you have a recent version, you can configure your 
computer to download and install the high-priority security updates 
automatically. There is a ton of information on Microsoft.com geared toward 
home users and security incident response, and to avoid boring the group 
with all of it, if any of you want some of the highlights, ping me offlist 
(lisaherewa@hotmail.com) and I'll compile a URL list for you this week.


###




----Original Message Follows----
From: "Betty" <Bettyfnelson@mchsi.com>
Reply-To: mccoypottery-talk@lists.mccoypottery.com
To: <mccoypottery-talk@lists.mccoypottery.com>
Subject: Re: [Mccoypottery-talk] Ebay Spoof
Date: Thu, 17 Feb 2005 16:01:06 -0600

Lisa, thank you for putting all these links here so handy for any one to 
use.
I have had my problems in the past with every virus, trojan and spyware and 
I try to be very careful and run scans frequently and have just hooked up a 
new computer.  I use www.ebay.com frequently to just go look for something 
or to price something and never type in my user name or go anywhere where 
they have my user name on the screen.  In the past 2 weeks I purchased 
something over Ebay and 3 different times I logged in with my user name to 
place a bet.  I got 3 of the spoof emails and they were sent about 2 minutes 
apart.  I sent them all to Spoof @ebay and they acknowledged them and said 
that they were indeed bad stuff.  Last time I had logged on and bid twice 
and I got 2 of the spoofs.  This makes me think that they are using 
something that is inbedded in the Ebay equiptment.  Betty from Ia.


----- Original Message ----- From: "lisa a" <lisaherewa@hotmail.com>
To: <mccoypottery-talk@lists.mccoypottery.com>
Sent: Thursday, February 17, 2005 3:00 PM
Subject: Re: [Mccoypottery-talk] Ebay Spoof


>If I send you spam, and you open it, I can get your user ID from the eBay 
>member search.
>
>If I write a script to submit data onClose, I can capture the information 
>you entered on a Web form even if you don't click the SUBMIT button.
>
>If you are missing key security updates and you open HTML spam and then 
>perform seemingly innocent input tasks, such as clicking the scroll bar, I 
>can turn your computer into a porn zombie while I sell stolen software 
>under your ID and sell the personally identifiable information I gathered 
>to credit card and passport frauds.
>
>Remove malicious software:
>http://www.microsoft.com/security/malwareremove/default.mspx
>Update Windows:
>http://windowsupdate.microsoft.com
>Update Office:
>http://officeupdate.microsoft.com/
>Remove spyware (beta):
>http://www.microsoft.com/athome/security/spyware/software/default.mspx
>
>###
>
>
>
>
>###
>
>
>
>
>----Original Message Follows----
>From: "McCoyPottery.com List Mom" <listmom@mccoypottery.com>
>Reply-To: mccoypottery-talk@lists.mccoypottery.com
>To: mccoypottery-talk@lists.mccoypottery.com
>Subject: Re: [Mccoypottery-talk] Ebay Spoof
>Date: Thu, 17 Feb 2005 14:33:07 -0600
>
>
>On Feb 17, 2005, at 1:34 PM, Cunningham, Beth wrote:
>
>>Well, I'm no expert but I can attest that she did not fill out any
>>information and Ebay is the one who told her "it is possible" that
>>someone can get your user name and password if you click on these
>>messages.  Yes, I realize that it seems far fetched, but I will
>>certainly not be opening one ever again.  Not worth taking a chance.
>
>_________________________________________________________________
>Express yourself instantly with MSN Messenger! Download today - it's FREE! 
>http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
>
>
>
>-----------------------------------------------------------------------------
>To be removed from the list, send email to 
>mccoypottery-talk-request@mccoypottery.com
>with the word "unsubscribe" in the body of the message.
>
>You can also unsubscribe on line at: http://lists.mccoypottery.com
>




-----------------------------------------------------------------------------
To be removed from the list, send email to 
mccoypottery-talk-request@mccoypottery.com
with the word "unsubscribe" in the body of the message.

You can also unsubscribe on line at: http://lists.mccoypottery.com

_________________________________________________________________
Is your PC infected? Get a FREE online computer virus scan from McAfeeŽ 
Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963