![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
I tried to log in to my account this evening because I'm in the middle of an auction. I went to www.ebay.com, which had the typical "Hello rivkawald!" message on it. I clicked "sign in." My username was prepopulated in the right field. I entered my password. And was directed to what seems to be a phishing page.
"We have noticed an increasing fraudulent activity recently. In order to provide your security and protect you from fraudsters we have introduced a new system of identification that will help us to avoid any kind of fraud or unauthorised access.
Please enter as more information as possible to provide your complete identification and to activate all the features of the new system."
The page then proceeded to ask for my full name, date of birth, mother's maiden name, social security number, credit card number & security code, ATM PIN, bank account number, and routing number.
No, really. And there wasn't any way to get past it.
(Screencaps are here and here.)
I went back to www.ebay.com and tried to log in again. Same thing again. I tried their "live help" chat and got routed to "account security live help," where I waited and waited and WAITED to no avail. "Thank you for your patience. Please hold for the next available Live Help Agent." And hold. And hold.
Finally I got through to a live agent. She had me clear my cache and cookies. I cleared everything out and then was able to get a regular login page when I went to ebay.com. I immediately changed my password, obviously.
But what the hell? I typed in the address to the eBay main page myself. I didn't follow a link in an e-mail. How could this happen? I am running AdAware and a full virus scan, but... yikes. This scares the hell out of me. I thought onlystupidcredulous people were victims of phishing scams.
"We have noticed an increasing fraudulent activity recently. In order to provide your security and protect you from fraudsters we have introduced a new system of identification that will help us to avoid any kind of fraud or unauthorised access.
Please enter as more information as possible to provide your complete identification and to activate all the features of the new system."
The page then proceeded to ask for my full name, date of birth, mother's maiden name, social security number, credit card number & security code, ATM PIN, bank account number, and routing number.
No, really. And there wasn't any way to get past it.
(Screencaps are here and here.)
I went back to www.ebay.com and tried to log in again. Same thing again. I tried their "live help" chat and got routed to "account security live help," where I waited and waited and WAITED to no avail. "Thank you for your patience. Please hold for the next available Live Help Agent." And hold. And hold.
Finally I got through to a live agent. She had me clear my cache and cookies. I cleared everything out and then was able to get a regular login page when I went to ebay.com. I immediately changed my password, obviously.
But what the hell? I typed in the address to the eBay main page myself. I didn't follow a link in an e-mail. How could this happen? I am running AdAware and a full virus scan, but... yikes. This scares the hell out of me. I thought only
