PDA

View Full Version : www.ebay.uk.com hacked?

editor
31-10-2007, 00:26
This is odd. I've logged into my usual Bay account and there's an official alert about an outstanding payment (this is correct). The message says:

Dear ----

You were recently invoiced for; GB---;and the balance will soon be due. If your balance is zero or you have recently made a payment, please disregard this message.

To assist you in answering some questions you may have, please refer to the information provided below.

To check your account status and make a payment:

1. Log on to http://www.ebay.uk.com
2. Click the 'My eBay' tab at the top of the page and sign in
Following the http://www.ebay.uk.com link takes me to a well dodgy looking 'search' page.

Clicking onto the 'messages' box below I get a correct mail with the right address: http://www.ebay.co.uk

Wha' up?
FridgeMagnet
31-10-2007, 00:29
Has there ever been an ebay.uk.com? I've only ever seen ebay.co.uk. Perhaps they didn't register the former.
editor
31-10-2007, 00:32
Has there ever been an ebay.uk.com? I've only ever seen ebay.co.uk. Perhaps they didn't register the former.It's clearly a fake, but it doesn't seem to be set up to phish accounts.

I can't work out how the scammers knew I had an outstanding payment...
FridgeMagnet
31-10-2007, 00:48
If they got the amount right, that's worrying. Perhaps ebay have cocked up and let that domain expire. It's just a search parking page, rather than a phishing site, it seems....
firky
31-10-2007, 00:53
ebay.uk.com is just a subdomain of uk.com, fake!
editor
31-10-2007, 01:00
If they got the amount right, that's worrying. Perhaps ebay have cocked up and let that domain expire. It's just a search parking page, rather than a phishing site, it seems....It looks like the ebay 'alert' was faked but seeing as I only accessed that after logging in and it appears to come from them, it seems very weird.

I've written to them.
subversplat
31-10-2007, 01:17
Maybe whoever at ebay has written the wrong address down on a mass mailer document, or a script that inserts domains has gone askew. The ebay.uk.com site is just a big advert for domain sales.

e2a: google shows things (http://forums.ebay.co.uk/thread.jspa?threadID=1200149348&tstart=0&mod=1193418474533).
Sunray
01-11-2007, 11:24
Make doubly sure you do not have any virus or malware redirecting just that ebay page to that dodgy ebay account. Ebay have a few problems with hackers and its not going away until they properly lock down their systems. Use a different PC to check and change your ebay password to be doubly sure.

I'm considering using a Simple Linux boot from a USB key to do online transactions.
editor
01-11-2007, 11:26
Make doubly sure you do not have any virus or malware redirecting just that ebay page to that dodgy ebay account. Ebay have a few problems with hackers and its not going away until they properly lock down their systems.I'm clean on viruses and the dodgy 'alerts' really are sitting in my proper ebay account so it looks to be something iffy their end.