eBay Password Reset Phishing Emails
05/24/2014

Earlier this week eBay asked users to reset their password after its corporate information network was attacked.  Cyber criminals will likely use the breach by sending phishing email messages to social engineer people into going to fake eBay sites and filling out usernames and passwords information.

We have seen this before and we warned to watch out for it.  The cyber criminals are ready to start sending phishing email messages shortly afterany large data breach.

eBay said that they would start sending out eMail messages last Wednesday.  (I have yet to see such an email message.)  Hopefully eBay does not include a link to reset your password.  We have been telling you for a long time to never click links in received eMail messages, but rather to go directly to the site in your web browser.  (Better yet, type it in a search using a browser with a web reputation plug-in such as WOT, McAfee SiteAdvisor, or AVG LinkScanner to prevent a typing mistake from sending you to a squatter site).

eBay even has a page on how to tell the difference between real and fake (spoof) eBay emails.  Just don't click any link received in an unsolicited email message; no need to try to determine if it is a real or scam message.

Think before you click.

eBay and PayPal users who haven't already done so should consider using the PayPal Security Key, a two-factor authentication solution that can be used to add for additional security on both sites.

More Information

Scam of the Week at KnowBe4 Security Awarness

Professional Services

If you need assistance with a security assessment, IT Professional Services can help. Please contact us.

Find out more about our Managed Care service.

To find out how vulnerable your network is schedule a free network security analysis today.