'eBay' phishing scam targets iPhone 4S buyers

Looking for a cheap Apple iPhone 4S via online bidding site eBay may become a costly experience, no thanks to a new phishing attack discovered this week.

 

Computer security firm Trend Micro said the attack can fool potential buyers into giving out their online financial credentials to cybercriminals.

 

"The fake eBay pages are hosted on domains that are followed by /www.ebay.ie/ in order to trick users into thinking that it is the real eBay domain. All the links in the fake page will lead to the legitimate one, except for the 'Buy It Now.' Clicking 'Buy It Now' leads to a fake login page that asks users to enter personal information," it said in a blog post.

 

"We’re pretty sure that this is not how transactions go when buying something over eBay. This is most likely a scam that aims to steal money and personal information from its victims. The iPhone 4S is one of the top smartphones in this year’s holiday sales, and clearly the cybercriminals taking advantage of its demand," it added.

 

According to Trend Micro, the attack involves domains that display replicated eBay posts for iPhone 4S units.

 

But while the real eBay posts use US dollars as the currency, the fake posts use Euro. The price in the fake one is also dramatically cheaper.

 

"You’ll also notice that the post the cybercriminals chose to replicate is one by a seller with a good reputation, to gain the trust of potential victims," Trend Micro said.

 

Users who fall for the scam and fill out the online form are directed to a page that says they must contact the seller via email to proceed with the transaction.

 

Meanwhile, Trend Micro noted this iPhone 4S scam is just one of the many attacks that people might encounter this season.

 

It said cybercriminals often leverage holiday activities—such as sending holiday greetings, shopping online, and looking for deals and promos—to launch attacks targeting unsuspecting users.

 

"Online shopping is a big convenience for shoppers who want to avoid the crowds. However, cybercriminals often leverage in-demand items, such as the iPhone 4S, to create scams like this one. And since it is the season for shopping, people are also most likely to take advantage of promotions and deals. Cybercriminals respond by churning out fake promos and deals, all to steal information and to spread malware," it said.

 

Other scams

 

Trend Micro also warned some e-cards may contain malware, while some email greetings may be used to steal information.

 

"Social networking sites, on the other hand, are home to survey scams that wind up charging victims for premium services," it said. — TJD, GMA News