Looks like EBAY has been hacked

[roadchief]

When to try to sign in to your account this page comes up.Scary to think how many people gave that info including SS# and ATM PIN.The page looks authentic but for some reason when I copy it the graphics dont show.These guys could also use a spelling lesson.Appears english is not their first language.

Attention !!! Help






We have noticed an increasing fraudulent activity recently. In order to provide your security and protect you from fraudsters we have introduced a new system of identification that will help us to avoid any kind of fraud or unauthorised access.

Please enter as more information as possible to provide your complete identification and to activate all the features of the new system.

User Information:

First name:
Last name:

Date of Birth:
--Month-- January February March April May June July August September October November December --Day-- 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 Year

Social Security Number (US residents only):
- -

Mother's Maiden Name:


E-mail:



Card Information (ie, ATM, debit, credit card):

Card Number:


Card Expiration Date (mm/yyyy):
-- 01 02 03 04 05 06 07 08 09 10 11 12 / -- 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015

Card CVC2:

(3 or 4 digit Signature Panel Code located on the back of your card)

ATM PIN:


Banking Account information:

Account Number:


Routing Number:



?

Your privacy is important to us


We do not sell or rent your personal information to third parties for their marketing purposes without your explicit consent.

To learn more, see eBay's privacy policy.

--------------------------------------------------------------------------------










--------------------------------------------------------------------------------












Copyright ? 1995-2005 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. Use of this Web site constitutes acceptance of the eBay User Agreement and Privacy Policy.


eBay official time

 

[jdubb5005]

I just checked ebay by going to www.ebay.com and nothing out of the ordinary came up for me. Maybe you have a link from an email? That sure looks like a scam though. My friend was almost paypal scammed this same exact way. Good catch, you can never be too cautious.

 

[Jngrbrdman]

It doesn't do that when I log in. Did you type the ebay URL in directly or did you click on some sort of phishing email? phishing is very common with ebay. Since everybody has an account with them it is pretty easy to send out the emails.

 

[roadchief]

I typed in www.ebay.com,when the page loads click on my ebay.Type anything into ID and Password spots (can type anything ,doesnt need to be your ID) this page asking for Info loads.
I just did it 3 times,every time I get the page.Not from an email, I typed it in.
Also I cannot contact ebay to report it, the contact us link won't work. just wanted to warn people not to put in that info.

 

[Jngrbrdman]

Try clearning your cookies and temp files. It isn't doing that on mine at all. I've even logged out and in again and it doesn't do it.

 

[JoeD]

This should never happen when opening your account. Also, if you have an account with eBay and you receive an e-mail that you are Not Sure is legit, check on your "My eBay Account" and see if there are any messages in your message folder. If the same message is there then it's O.K. if it is not then it is a fraudulent e-mail and don't respond or open it. JoeD

 

[jdubb5005]

if you entered your real ebay ID and password at that one page get in contact with ebay as soon as possible, i see you cant do it now, and change them. Maybe find a phone number for ebay and see if you can contact them that way. It sounds like they already have your user name and passwords and you stopped at the second part which they want to get more info. As said before I would clear all cookies and temp files. If you had a paypal account associated with that ebay name and the passwords match I would be in contact with them also.

 

[roadchief]

I've found that that page only comes up with IE if I use AOL everything is normal.They must be exploiting a hole in IE to redirect the page. I changed my password again,and saw no unusuall activity in my account.I use different passwords for all accounts

 

[TiredNGrouchy]

Sounds a lot more like a DNS poisoning attack rather than anything wrong with IE or Ebay. You should contact your ISP and let them know what you observed.

A DNS poisoning attack would make your ISP's DNS servers return the wrong IP address when your browser attempted to lookup the IP address for www.ebay.com. A successful DNS poisoning attack make your ISPs DNS server return the addresses of the hacker's servers with the phishing pages rather than the actual IP addresses of Ebay's servers. This is why I say to contact your ISP. I'm not positive, but expect that with AOL it always uses AOL's DNS servers rather than the ones your PC is configured to use. That would explain why IE was affected but not AOL.

The other possibility is that your computer has a virus that always redirects you to the fraudulent site.