[分享] 詐騙越來越猖獗，大家要小心

kuodavid29

就在一個小時前，
我犯了一個錯。:!(

收到一封eBay寄來的電子郵件，
我看看來信者架email]Oaw-confirm@ebay.com[/email]
因我在eBay也有交易帳戶，
不疑有他的打開郵件，內容大意是：
You have received this email because we have strong reason to believe that your eBay account had been recently compromised. In order to prevent any fraudulent activity from occurring we are required to open an investigation into this matter. To speed up this process, you are required to verify your eBay account by following the link below.
就是叫我要在網站上更新資料，以免帳戶被凍結…
然後我就很順手的開啟連結的網站，
裡面也有eBay的mark還有輸入帳號、密碼、信用卡、信用卡識別碼、有效期限、地址、國別..etc
做的輸入介面真的很人性化，呼嚕嚕一下子就輸好了
按下送出後，腦中閃過一個奇怪的念頭：「這是不是騙人的？？」

我立即開啟eBay首頁，很快的找到下面這一頁：
http://pages.tw.ebay.com/education/spooftutorial/index.html
看沒幾眼，頭皮發麻、心快要跳出喉嚨。
拿起電話就跟信用卡銀行止付，一邊止付一邊更換eBay的密碼。
接著把這封信轉給eBay的檢舉信箱：
spoof@ebay.com

約三分鐘後，就收到eBay的回信，果不其然，真的是詐騙信件：

Hello,
Thank you for writing to eBay regarding the email you received.
Emails such as this, commonly referred to as "spoof" or "phished"
messages, are sent in an attempt to collect sensitive personal or
financial information from the recipients.
The email you reported was not sent by eBay. We have reported this
Email to the appropriate authorities.

In the future, be very cautious of any email that asks you to submit
information such as your credit card number or your email password.
EBay will never ask you for sensitive personal information such as
passwords,
bank account or credit card numbers, Personal Identification Numbers
(PINs), or Social Security Numbers in an email. If you ever need to
provide sensitive information to us, please open a new Web browser,
type www.ebay.com into your browser address field, and click on the "site
map" link located at the top the page to access the eBay page you need.
If you have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com. Do not respond to it
or click any of the links. Do not remove the original subject line or
change the email in any way when you forward it to us.
If you have already entered sensitive financial information or your
password into a Web site based on a request from a spoofed email, you
should take immediate action to protect your identity and all of your
online accounts. We have developed an eBay Help page with valuable
information regarding the steps you should take to protect yourself.

http://pages.ebay.com/help/confi ... heft-reporting.html

To review eBay's new tutorial about Spoof Emails, please see the
following Web page:

http://pages.ebay.com/education/spooftutorial/

Once again, thank you for alerting us to the spoof email you received.
Your efforts help us ensure that eBay remains a safe and vibrant online
marketplace.
Regards,
Ian
eBay SafeHarbor
Investigations Team
______________________________
eBay
Your Personal Trading Community (tm)
----------------------------------------------------------------------------------

果真是，不經一事，不長一智…

catmytw

我也有收過類似郵件
不理他

grey

我也收到內容一模一樣的信耶~~><
還好…當時在半信半疑下，還沒有填寫資料傳回去
所以這封mail還躺在信箱裡，還好有您的分享
真是太可惡了…趕快來去刪郵件~~

taiwanboy

其實要判斷這種是否真假並不難
只要多仔細小心的看一看

第一, ebay, paypal, 一再強調絕對不會在任何情況下跟你索取你的帳號, 密碼
也不會在 e-mail 裡面跟你索取你的卡號, 他們試著教育他們的使用者了

第二, 很多 e-mail 裡面都會附連結, 但是他表面寫的, 其實跟你實際點的並不同,
舉個例子  http://www.palmislife.com
很多是用這種手法, 表面上看是 PIL, 點了以後是 YAHOO

怎麼判斷呢? 把你的游標指在這個連結上, 但是不要按,
然後在你 Outlook Express 或 Outlook 底端的 status bar
就會顯現出他真正的位址, IE 也會
如果沒有, 點右鍵, 選"複製捷徑", 然後貼到筆記本裡面, 仔細研究一下
就可以看出端倪

我收過太多太多這種信了, 他們都會用偽裝的位址,
如果你剪貼下來看到的只是一個全部是數字的 IP 的話,
那百分之百是騙人的, 而且這個詐騙集團小氣到連個網址都不肯註冊

有些會用一些假的網址, 騙你
比方說
http://signin.ebay.com@10.19.32.4/
http://signin-ebay.com/      (資料來源 ebay.com)
他再他的網址裡面加入了一個 ebay 的字眼
讓你以為那是真的 ebay 的網頁, 其實你要會判斷那是假的

第三, ebay 有提供一個工具列叫 ebay toolbar
http://pages.ebay.com/ebay_toolbar/
在這個 toolbar 裡面有一個 Account Guard 功能
就是如果你到了一個假的 ebay 網站, 他會警告你說那是假的
也會方便你舉發這類的網站

今天又收到一封, 說是 USBack 要求我確認網路密碼, 還要確認帳號
有夠亂來, 我根本沒有該銀行的帳號, 騙錢信還是照樣寄來
用同樣的手法測試, email 裡面的網址寫出來的是
https://www.usbank.com/xxxx/xx
但是判斷他的捷徑以後, 他是連到 https://usbankcorp.biz
這樣你就要知道, 是騙人的

台灣騙錢的事情已經太多太多了, 現在美國也開始流行
我想受騙的人會很多, 因為美國實在太大了, 要教育民眾比較困難
手法也都是很陳舊的就可以騙到帳號密碼
大家要小心, 基本上, 銀行, ebay, paypal, 都永遠不會發一封 email 給你
要你更新你的私人訊息, 更別談帳號密碼了

[ Last edited by taiwanboy on 2004-8-13 at 02:51 ]