wonwinglo

************************************************** **********
EBAY'S BACK DOOR WIDE OPEN & LETTING SCAMMERS IN
************************************************** **********
There is a scammer's tool floating around the web that has been offered for sale to several ebaY users. This tool allows a scammer to access ALL user info through a utility ebaY uses to track all user information.
If you look at this link, you will see a page with ebaY seller information overlaid with the scammers SCO Helper program that allows the scammer to send second chance offers through ebaY's own system, to
potential victims who have bid on the legitimate seller's items.
http://corriganb.com/sco.jpg
It is very possible that this ebaY function is what is being used by the scammers to post the BAPE auctions, and monitor email queries, replies
and payments so they can re-route them. It is obvious that this information is readily accessible to the scammers, and that ebaY has not done anything to close the back door being used by the scammers.
For everyone wondering how scammers on ebaY manage to hijack accounts at will, this is the answer. ebaY says the scammers are getting the info due to ebaY users falling for phishing scams. conclude that it may not be an ebaY insider, but instead an outsider,
with complete access to all user account inside information.
If this is as it appears, ebaY is and has been aware of this wide open back door, and can't or won't do anything about it.
Beware that your supposedly secure information is being compromised,this would also explain why information on sales or payment invoices sometimes drags behind the real details as the information is being overlaid and corrupted by the scammers tools.
It even places a question mark on answering questions via the 'Ask seller a question' pages as this information is being tracked and going to unknown sources.

__________________
'And there I was oil on my goggles from a broken pipe,then I looked at the altimeter,all I could see was the makers name !'
www.wonwinglo.scale-models.net/

Bluewavestudios

Barry,

there is an easy answer to this and it is probably waiting for download on your pc on Microsoft Update.

Update to internet explorer 7 which was finally released as a fully working version in mid November....it includes an anti phishing feature which does work...basically it scans any website you look at and if it is suspect, will stop you going there and display a big red flashing warning bar at the top of your screen, it gives you the option to carry on if you wish or block it..I have seen it in action and it does work !!!
so the spoof ebay sites days are numbered now !!! ...I hope

Regards........Mark

__________________
I'm Only Here Coz I'm Not All There !!!

Phoenix

yea but from what i can gather this is a app that you download and install so the ie antiphishing thing wont do anything to stop this

squiffythewombat

i dont have much time but feel the need to comment on this! Barry, as you know i would never recomend ebay and rarely praise them but this thread is a bit harsh!

Phishing is a common problem over the entire internet, it is not just ebay, i have recently had to change my shop software as there is now a phishing program for OS commerce! Myspace has also been hit badly!

Saying ebay wont do anything about it is a bit unfair as there is very little they can actually do other than warn their users and recomend brower upgrades!

For example i could setup a phishing page for scale-models and quite quickly gain a list of usernames and passwords, if one of those happened to be a high level account (ie:admin) then i could do even more damage!

wonwinglo

Harsh !! rubbish Squiffy,the tool has been advertised and sold on E-bay right under their very eyes,proof if any that they do not police their own auction,that is unless you happen to place 'Hornby Princess Elizabeth' as the header,and then get told that it has been removed because there are two names conflicting,yes this makes a mockery of the 'e-bay community' the fact remains that e-bay are prepared to take millions of pounds from people but do nothing to protect their own software,or for that matter the very people that made them rich,they even have a reluctance to appear on the television 'Watchdog' programmes and answerable to the public.
There is a known security loophole which starts the moment you advertise,but nothing has been done to protect its many customers or even inform them,spoof replies are automated and not looked into.
The information comes from the Auction Guild and was not written by me either,informative yes,harsh no.

__________________
'And there I was oil on my goggles from a broken pipe,then I looked at the altimeter,all I could see was the makers name !'
www.wonwinglo.scale-models.net/

squiffythewombat

I still think for all those who have been scammed theres millions of happy ebayers out there! The scams were bad a year or two ago but now they are much less prolific and i can certainly say ive had incidents where ebay have been more than helpful! Do you not get the month anti-spam/fakes emails?

The notion of phishing and hacking software sold on the site inst really new, that was about a couple of years ago! One has to realise there is a small army of scammers from countries such as nigera that spend all day performing low level attacks! Creating an army of ebay police to stop this would result in such a high increase in fees to cover personal costs that the marketplace would be threatened, this topic was recently covered on the powersellers forums and its not quite as simple as "policing" ebay as theres so many external factors, both social, domestic and economic!

Spoof emails are always automated as its the easiest way to bulk send?

You had a listing removed because it had conflicting names? how did they explain that? lol!

I do agree tho - they need to have much better customer service but i also think the vast majority of people dont realise the complexity of the situation!

excuse my rushed grammer and spelling, take care!
Toby