eBay Password Reset Phishing Emails
05/24/2014
Earlier this week eBay asked users to reset their password
after its corporate information network was attacked. Cyber
criminals will likely use the breach by sending phishing email messages
to social engineer people into going to fake eBay sites and filling out
usernames and passwords information.
We have seen this before and we warned to watch out for
it. The cyber criminals are ready to start sending phishing email
messages shortly afterany large data breach.
eBay said that they would start sending out eMail messages last
Wednesday. (I have yet to see such an email message.)
Hopefully eBay does not include a link to reset your password. We
have been telling you for a long time to never
click links in received eMail messages, but rather to go directly to
the site in your web browser. (Better yet, type it in a search
using a browser with
a web reputation plug-in such as WOT, McAfee SiteAdvisor, or AVG LinkScanner to prevent a typing mistake from sending you to a squatter site).
eBay even has a page on how to tell the difference between real and fake (spoof) eBay emails.
Just don't click any link received in an unsolicited email message; no
need to try to determine if it is a real or scam message.
Think before you click.
eBay and PayPal users who haven't already done so should consider using the PayPal Security Key, a two-factor authentication solution that
can be used to add for additional security on both sites.
More Information
Scam of the Week at KnowBe4 Security Awarness
Professional Services
If you need assistance with a security assessment, IT Professional
Services can help. Please contact us.
Find
out more about our Managed
Care service.
To find out how vulnerable your network is
schedule a free network security analysis today.
|