The scariest thing about this kind of spam is that it shouldn't take
long for spammers/phishers to learn to write. After all this is
grammar, punctuation, and a little psychology -- not rocket science.
The recent virus distributed as a Microsoft update came pretty close to
looking "completely" official.
FWIW.
Bruce.
------------------------------------------------------------------------
----
Bruce J. Senn Phone: (518) 388-6664
Senior System Manager FAX: (518) 388-6458
Union College E-mail: [log in to unmask]
Schenectady, NY 12308 WWW: http://www1.union.edu/~sennb
------------------------------------------------------------------------
----
-----Original Message-----
From: HP-3000 Systems Discussion [mailto:[log in to unmask]] On
Behalf Of Denys Beauchemin
Sent: Tuesday, July 27, 2004 2:43 PM
To: [log in to unmask]
Subject: Re: OT: Spam from list
Speaking of Spam, I got an interesting one yesterday.
It ostensibly comes from the eBay Billing Department with the subject
line of Credit/Debit card update.
The message looks very clean, very official.
It reads as follows:
"Dear eBay customer,
During our regularly scheduled account maintenance and verification
procedures, we have detected a slight error in your billing information.
This might be due to either of the following reasons:
1. A recent change in your personal information ( i.e.change of
address).
2. Submiting invalid information during the initial sign up process.
3. An inability to accurately verify your selected option of payment due
to an internal error within our processors.
Please update and verify your information by clicking the link below:
https://arribada.ebay.com/saw-cgi/eBayISAPI.dll?PlaceCCInfo
If your account information is not updated within 48 hours then your
ability to sell or bid on eBay will become restricted.
Thank you
The eBay Billing Deptartment ."
I just copied and pasted the message, leaving the spelling mistakes as
is. A few things started ringing alarm bells in my mind. Notice the
spelling of "Submiting" and "Deptartment". Also notice the way the i.e.
is set up in the first point.
Another is the whole tenor of the message, I just sounds phony.
Also the URL looks a little bizarre. What's with the arribada thing?
But I guess the biggest clue to the fact this is fake is that I do not
have an eBay account.
Just for fun, I clicked on the link as it is to see where I would be
sent. I can assure you it was not eBay. Yesterday it sent me to a very
official looking eBay page on blacksnow.web.aplus.net. There I was
asked to supply my eBay user name and password (twice,) and to give my
name and credit card number and expiration date, along with the ccvn
from the back of the card. I was also prompted fur my back account and
transit number.
I was only too happy to fill in all that information for a Mr. John F.
Kerry of Massachusetts, figuring his wife could spare the money. Just
kidding, I just closed the browser.
Today the page cannot be found.
I wonder how many people actually got taken.
Denys
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *
|
