Beware - creative new (at least to me) EBay phishing scam

[agnes!]

Hadn't gotten this one before.

E-mail arrives in my Inbox, is addressed to my DH.
Following is what it says, complete with an "original" e-mail purporting to be from "us", but take a look at the DATEs ...

PS - I am of course going to delete the thing, but am first going to forward it to EBay's fraud department.

**********


Dear (DH name),

Your package is ready to be delivered, but I am still waiting for the payment confirmation.
Please let me know when it is done.
Confirm that is it the same auction with the one posted on

http://www.grani.at/gallery/gig/logind_ (blah blah blah)/eBayiSAP.dll?signIn&ru=http://www.ebay.com

I am very interested in this auction and ready to complete the deal as soon as possible. Thanks,

(scammer's name)

---On Sun, 20/03/09, DH <our email address> wrote:

From: DH
Subject: Message from eBay Member regarding Item #(invalid number)
Date: Mon, 23 Mon 2009, 11:23AM

I am waiting for payment confirmation.
Thank you
(DH name)

************

There are so many things wrong with this it's almost pathetic.

First, DH is not the EBay member, I am.
Second, what EBayer would wait for payment for OVER A YEAR?
Third, the Item # does not exist.
Fourth, www.grani.at is not an EBay site (ya think?!?...hmmmm)

Beware!
agnes!

 

[legalsea]

I received much the same thing two weeks ago. Like you, deleted quickly.

 

[npmommie]

I have received several of those, I forward them to the scam dept at ebay then I delete them.

I have to add, the first one I got, I didn't know it was a scam. I thought a seller inadvertently sent the email to the wrong buyer, so me and my nice self emailed him back telling them they sent the email to the wrong person, just an fyi.

well don't ya know shortly after that somehow my ebay account got hacked into. I had to change my password, no money went missing from paypal or anything but still what a pain.

so now I don't care if I get an email from the pope, it goes to the trash.

 

[Cheshire Figment]

According to http://www.iana.org/domains/root/db/ which is the list of all Internet codes, "AT" is Austria.

 

[Experiment_626]

One thing to keep in mind -- eBay will never send you a message with link to login to the site from within the e-mail itself. A legitimate e-mail would ask you to go to the main site and log in from there, and could include an item number if you needed to check a specific item.

If a message looks like it comes from eBay but gives you a "direct" log-in link, it is fake. In the words of Admiral Ackbar, "It's a TRAP!!!"

 

[agnes!]

According to http://www.iana.org/domains/root/db/ which is the list of all Internet codes, "AT" is Austria.

Thanks for the correction Mike. I had only done a simple Google search and the first page had lots of Russian hits. Just looked the domain name up over at Phishtank and there's a posting about it over there. That reported phish looks different but the intent is the same: http://www.phishtank.com/phish_detail.php?phish_id=946751

agnes!