Posted by David Sherman on Tuesday, January 30, 2007 at 22:27:40 :
This one was really sneaky. I got a proper official message through the ebay message system asking if the item I had listed was the same as another one that he said was listed on ebay. He provided the link to the other one. When I click on the link, it brings up a phishing copy of the ebay login page. The copy, unlike many of them, was perfect. The only clue that it was phony was the URL, which included a ".ru" in the middle of it. When I went to the main page of that site, it was indeed some Russian ISP. A person could easily get fooled by this. I knew the link was bogus when I first saw it, but if I wasn't paying attention, the second clue would have been that I have FireFox set to automatically fill in login screens, like the ebay one, and yet the phony page had the login fields blank, which means its URL wasn't in FireFox's list of login pages that I'd asked it to save.
This is the sneakiest phishing scam I've seen yet, because they send it through the offical ebay message system and it uses an angle that's a lot different from the usual "your account will be closed if you don't sign in here" pitch, which then usually points to a page with lots of mistakes on it.
Just thought I'd warn you. Look out for those Ruskies. They're the world's best professional password stealers.
Follow Ups: