Hijacker spam mail: SCAM

[MatrixWatch]

Here is an email being sent out to eBay customers. Has anyone else received this one? It has an attachment that leads to a false eBay sign-up page. What actions should be taken by those who are victims of this scam?



From: "aw-notice@ebay.com" <aw-notice@ebay.com>
To: ******@*********.NET
Subject: TKO NOTICE: eBay Registration Suspension


We regret to inform you that your eBay account could be suspended if you don't resolve your problems.

To resolve this please login below or download the attachement and login to eBay in order to resolve your account problems. If your problems could not be resolved your account will be suspended for a period of 3-4 days, after that it will be again operational.

Per the User Agreement, Section 9, we may immediately issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if we believe that your actions may cause financial loss or legal liability for you, our users or us.

We may also take these actions if we are unable to verify or authenticate any information you provide to us. Due to the suspension of this account, please be advised you are prohibited from using eBay in any way. This includes the registering of a new
account.

Please note that this suspension does not relieve you of your agreed-upon obligation to pay any fees you may owe to eBay.

Regards,Safeharbor Department

eBay, Inc.

[spydrman]

Report it to ebay. I'm sure they will take the necessary actions against this scam.

[muggs]

That's a new one the ones I got didn't say my account would be suspended. But they sent them to two accounts that were already suspended anyway(not for matrix auctions). Which is what confirmed for me that they were scam artists sending them. I actually thought about filling out the info they wanted though since the accounts were suspended just to mess with whoever was sending the email but then they would have access to my cc number so I decided it wouldn't be too good of an idea.

I think the email that you report it to is spoof@ebay.com

muggs

[hello]

These are easy for people to fall for.

Just report them to eBay and remember to add all headers.

Never give your information such as passwords, credit cards, account numbers to any one!!!!

[peterdragin]

Always forward these to spoof@ebay.com

This is what Ebay wants done with these. When you forward the mail they get the headers and can tell where it came from.

[MatrixWatch]

Here is an email that they send when you forward it to that "spoof" address:

______________________________________

Thank you for contacting eBay's Trust & Safety Department about an
email
you received from an address that includes '@ebay.com' but that may not
be an authentic email from eBay. We will investigate this situation
immediately.

Please be advised that there have been cases where people have
attempted
to gain access to an eBay member's personal information by sending
"spoof" emails. Spoof emails intentionally give the false impression
that they have been sent by eBay to solicit people to transmit their
account information. Based on your inquiry to eBay's Trust and Safety
Department, the email you received was likely a spoof.

eBay is very concerned about spoof email and is taking prompt action to
address the issue. If you think you may have entered personal
information into a spoof site, we advise you to review the information
at the web address below, which contains more detailed information
about
the following steps:

http://pages.ebay.com/help/confidence/problems-identity-theft.html

1. Change your eBay password and email account password

Periodically changing your password is one of the most effective ways
to
maintain security on any Web site. If you think there is a possibility
of a breach in your account security, we strongly suggest that you
begin
by changing your password.

2. Forward the email to Spoof@ebay.com

If you haven't already done so, please forward a copy of the email,
(which will include the full header), to spoof@ebay.com. Forwarding the
email will help us investigate this matter more quickly. Please do not
forward the email as an attachment or alter the subject line in any
way.
For more information on how to identify a header, please visit:

http://pages.ebay.com/help/basics/information.html

3. Protect your identity

If you entered information such as your social security number or
credit
card numbers into a web site that you were directed to via a spoofed
email, you need to take immediate action to protect your identity. The
following web sites have valuable information on the steps you should
take to protect yourself:

eBay Help:
http://pages.ebay.com/help/confidence/problems-identity-theft.html
U.S. Government ID Theft Site:
http://www.consumer.gov/idtheft/victim.htm
BBB ID Theft Site:
http://www.newyork.bbb.org/identitytheft/newscams.html

We will contact you once our investigation is complete or if we need
more information. In order to dedicate resources to investigating this
type of situation, please submit any other questions or concerns
through
our Help System, which can be accessed by clicking on the Help button
at
the top of any eBay page.

*Please do not respond to this email, as your reply will not be
received. If you need to contact us again, please use the eBay Help
system.

We appreciate your efforts in helping keep eBay a safe online
marketplace.

Regards,

eBay Trust & Safety Team

[MatrixWatch]

And here is another one that they send when you report a scammer-email header:

______________________________________

Hello,

Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.

The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We have investigated the source of
this email and have taken appropriate action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.

We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your email
password. eBay will never ask you for sensitive personal information
such as passwords, bank account or credit card numbers, Personal
Identification Numbers (PINs), or Social Security numbers in an email
itself. If you ever need to provide information to eBay please open a
new Web browser, type www.ebay.com, and click on the "site map" link
located at the top the page to access the eBay page you need.

If you have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com and do not respond to
it
or click on any of the links in the email message. Please do not change
the subject line or forward the email as an attachment.

If you entered personal information such as your password, social
security number or credit card numbers into a Website based on a
request
from a spoofed email, you need to take immediate action to protect your
identity. We have developed an eBay Help page with valuable information
regarding the steps you should take to protect yourself.

To get to the "Protecting Your Identity" Help page from the eBay site,
please click on the "help" link located at the top of most eBay pages
and select the following topics when the "eBay Help Center" window
appears:

Safe Trading > If Something Goes Wrong > Identity Theft

We encourage you to review additional information about protecting your
identity found in the eBay Help system. Please click on the "help" link
located at the top of most eBay pages and select the following topics
when the "eBay Help Center" window appears:

Safe Trading > If Something Goes Wrong& > Account Theft > Account
Protection

Once again, thank you for alerting us to the spoof email you received.
Your vigilance helps us ensure that eBay remains a safe and vibrant
online marketplace.
Regards,

Ian
eBay SafeHarbor
Investigations Team
______________________________
eBay
Your Personal Trading Community (tm)

*******************************************

Important: eBay will not ask you for sensitive personal information
(such as your password, credit card and bank account numbers, Social
Security numbers, etc.) in an email. Learn more account protection tips
at:

http://www.pages.ebay.com/help/account_protection.html
_____________________________________________

For our latest announcements, please check:

http://www2.ebay.com/aw/announce.shtml
_____________________________________________

In order to better serve you, we'd like to occasionally
request feedback on our service. If you would rather
not participate, please click on the link below and send
us an email with the word "REMOVE" in the subject line.
If that does not work, please send an email to the
email address below. Your request will be processed
within 5 days.

mailto:cssremove@ebay.com

*******************************************