HTML/EbayPhish.06BE!phish

Alias/esHTML/EbayPhish.06BE-phish
Release DateApr 25, 2006
Detection Availability
Active DatabaseExtended Database
FortiGatelowhigh
FortiClient
FortiMailN/A
Current Antivirus Definition Database Version: 12.338
Description

Visible Symptoms

arrives as a suspicious mail disguising as an Ebay account notification.

Detailed Analysis

  • This detection is for a phishing mail disquising as an official notification from Ebay.

  • It contains the following sample message:
    "We regret to inform you that your Ebay account could be suspended if you don't reupdate your account information. To resolve this problem please visit link below and re-enter your account information."

  • The spammed mail contains a URL that indicates http://218 . 81. 122 . 239:180/r1/e/ which holds the site intended to compromise the user's personal information


  • Below is a sample screenshot of the spammed mail:

    • Reference: ID - 151319