do it. think it. blog it! ... a twisted world

Wednesday Aug 03, 2005

Paul Mutton from netcraft has posted a nice warning to users about the emails that we receive from ebay.
Fraudsters have exploited a flaw in the eBay web site that allows them to orchestrate attacks using eBay's own Sign In page. Registered users of eBay's popular online auction web site must sign in using a username and password in order to participate in bidding and listing of items. A new style of attack reported through the Netcraft Toolbar community shows fraudsters exploiting flaws on the Sign In page and on another ancilliary page which results in victims being redirected to the fraudster's site after they have logged in. This particular attack starts off like many others, by sending thousands of emails that instruct victims to update their eBay account details by visiting a URL. However, that is where the similarity ends, because the URL in this case actually takes the victim to the genuine eBay Sign In page, hosted on signin.ebay.com. By including special parameters at the end of the URL, the fraudster has changed the behaviour of the Sign In page so that when a user successfully logs in, they will then be sent to the fraudster's site via an open redirect hosted on servlet.ebay.com. The eBay Toolbar reports that the maliciously modified Sign In page is a "Verified eBay Site". Conversely, the Netcraft Toolbar denies access to the modified page while still allowing access to genuine eBay Sign In pages. The victim is more likely to trust the contents of the fraudster's site, because they have arrived there as a result of signing into eBay via a genuine eBay Sign In page. Because there is less reason to suspect anything is awry, the victim is more likely to surrender any sensitive details in the mistaken belief that they are really giving them to eBay. Theft of eBay and PayPal accounts is of particular interest to fraudsters, as they can be used to launder money and list auctions for high value goods, piggy-backing off someone else's positive feedback.
I received one such email yesterday, I'm sure that there are thousands of these floating around. However, my netcraft toolbar (which I have installed, instead of the google toolbar) helped me, as the page was denied access. Hopefuly after reading this there may be several of you who may upgrade their browser toolbar to netcraft's toolbar from their current one as thats one toolbar I TRUST. & for those folks who just do not like installing toolbars, well, here's a tip. Simply "DELETE" all emails you receive that ask you for some sort of verification or information update.
Comments:

Every timberland boots man is a poet when he is in love. First ugg boots love is only a little foolishness and a lot of curiosity. Friendship is like timberland boots earthenware: once broken, it can be mended; love ugg classic boots is like a mirror: once broken, that ends it. Friendship is love ugg bailey button without his wings. http://www.inthego.com/

Posted by Retailing Online Sale on September 22, 2009 at 11:50 AM EDT #

The timberland mens boots world can be changed by man endeavor, and that this endeavor can lead to something timberland men's 6 inch new and better .No man can sever the bonds that unite him to his society simply by averting his eyes . He must ever be receptive and sensitive to the new timberland men's classic; and have sufficient courage and skill to novel timberland shoes facts and to deal with them cheap timberland boots. http://www.runtimberland.com/

Posted by Timberland boots on October 09, 2009 at 07:14 AM EDT #

It was a very nice idea! Just wanna say thank you for the information you have shared. Just continue writing this kind of post. I will be your loyal reader. Thanks again.

Posted by links of london on October 20, 2009 at 03:04 AM EDT #

<a href="www.elegantugg.com">Ugg dakota</a> shoes can be worn all year round, It can keep your feet dry at summer and give you warm in winter , <a href="www.elegantugg.com">uggs outlet</a> ,whether in appearance or quality are first rate. <a href="www.elegantugg.com">ugg boots online</a> choose a pair of good shoes to your feet.
http://www.elegantugg.com/

Posted by ugg dakota on November 09, 2009 at 03:06 AM EST #

Good share, Attractive enough for me, thanks for your kind share, Fashionable and <a href="http://www.buddyugg.com/"><strong>cheap ugg boots</strong></a> Keeps with you at any time.<br>

Posted by bobjum on November 12, 2009 at 08:58 PM EST #

welcome you to visit my website
ugg sale
<a href="www.famousugg.com">ugg sale </a><br />
http://www.famousugg.com

There's also a lot of good things I have. esample NFL jerseys
new uggs
<a href="www.webugginuk.com">new uggs </a>
http://www.webugginuk.com

<p>Here are cheap commodities and enthusiasm boss<a href="www.commonnfl.com"> nfl jersey sales</a><br />
Here you can buy the rest assured that the goods <a href="www.commonnfl.com">youth nfl jerseys</a></p>
<p><a href="http://www.commonnfl.com">www.commonnfl.com</a></p>
http://www.commonnfl.com

Posted by eagle on November 14, 2009 at 06:21 AM EST #

Thanks for your one minute for browse our website.
<a href="http://www.plubrands.com/timberland-boots-timberland-mens-custom-boots-c-561_587_592.html ">timberland custom boots</a>
<a href="http://www.plubrands.com/timberland-boots-timberland-womens-6-inch-boots-c-561_587_591.html ">timberland 6 inch boots</a>
<a href="http://www.plubrands.com/timberland-boots-timberland-womens-high-cut-boot-c-561_587_595.html ">timberland 6 inch boots</a>

Posted by godtent on November 16, 2009 at 01:11 PM EST #

Thanks for your one minute for browse our website.
<a href="http://www.plubrands.com/footwear-timberland-boots-c-561_587.html">Timberland Kid Boots</a>
<a href="http://www.plubrands.com/footwear-timberland-boots-c-561_587.html">Timberland Classic boots </a>
<a href="http://www.plubrands.com/timberland-boots-timberland-mens-custom-boots-c-561_587_592.html">Timberland Custom Boots</a>

Posted by godfill on November 17, 2009 at 05:31 AM EST #

Post a Comment:
  • HTML Syntax: NOT allowed