eBay Security Check - Spoof Email Phishing Scam
22nd February 2004

Scammers hope to convince recipients of this spoof email to give their eBay and email user names and passwords with this forged eBay form by email...

read also our brief guide to Phishing

This spoofed eBay email (see image below) is a forgered eBay form page which utilises genuine graphics to appear authentic. The senders address is also spoofed.

The form asks for your eBay and email user names and passwords and sends them on to the scammers via a PHP form to mail script located at www.mumucaca.com. This domain is hosted by Yahoo Inc and was also registered by them for a US citizen.

If you have received this email, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content or the same but with the fake page(s) hosted by a different provider. Also, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first, although not necessarily from the same apparent sender.

The Email ...