eBay Security Measures - Email Phishing Scam
5th January 2004

Does eBay's site policy mean that you have to complete a sign in page sent by email?- Not likely! Its a scam ...

This spoof email phishing scam takes the form of a fake eBay sign in page (see image below).

According to the text in the form, the supply of your user name, password and email address are necessary due to an apparent eBay policy. This is of-course a complete fabrication, and eBay do not have a policy of sending sign in pages by email at all.

We found that the email had been coded to send this form data to the scammers at an email address (security@ebay-moreinfo.com) using a form to email service provided by 4pawsdb.org. This would occur blindly and while your browser opens the genuine eBay.com sign in page. We looked into ownership of the domain 'ebay-moreinfo.com' and found (as we expected to) that it does not belong to eBay Inc., but was registered to an individual in the USA through Yahoo (who are also registered as the hosts of this domain).

If you have received this hoax email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the

fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

Take a good look at the following image, because this hoax email scam may be coming to an inbox near you!

The Email ...