Newsgroup: it.news.net-abuse
Titolo: Ebay, nuova truffa?? (usando nome di ebay)


From: "eBay" <aw-co...@eBay.com>
Content-Type: text/html
Date: Sun, 13 Nov 2005 08:50:22 -0600 (CST)
<!--StartFragment --> <BR>
<TABLE cellSpacing=0 cellPadding=0 width=600 border=0>
<TBODY>
<TR vAlign=top>
      <TD width=600 bgColor=#d6dcfe><FONT face="Arial, Helvetica,
sans-serif   " size=3><STRONG><FONT face=Verdana>Update 
        your eBay account</FONT></STRONG></FONT> </TD>
<TD width=200 bgColor=#d6dcfe>
<DIV align=right><IMG height=18 
src="
http://pics.ebaystatic.com/aw/pics/aboutme/v3/ebay_logo_39x18.gif
" 
width=39></DIV></TD></TR>
<TR>
<TD bgColor=#d6dcfe colSpan=2 height=2><IMG height=2 
src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1></TD></TR>
<TR>
<TD vAlign=center bgColor=#9999cc colSpan=2 height=2><IMG height=2 
src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1></TD></TR></TBODY>
</TABLE><BR>
<TABLE cellSpacing=0 cellPadding=0 width=615 border=0>
<TBODY>
<TR>
<TD vAlign=top width=615>
<P><FONT face="Arial, Helvetica, sans-serif   " size=-1>Dear <STRONG>eBay
</STRONG>,<BR><BR>During our regularly schedule account maintenance and 
verification we have detected a slight error in your billing information 
on file with eBay. This might be due 
to either following reasons:<BR></FONT></P>
        <FONT face="Arial, Helvetica, sans-serif   " size=-1> </FONT> <P>
<FONT face="Arial, Helvetica, sans-serif   " size=-1><FONT face=arial>             
- 
          A recent change in your personal information (i.e. change of 
address)<BR>
                       - 
          Submitting invalid information during the initial sign up 
process.<BR>
                       - To 
          many logins on your eBay account.<BR>
                       - 
          Our database had an error from unknown reasons.<BR>
          <BR>
          </FONT></FONT><FONT size=2><FONT face=Arial>Please sign in to 
your eBay 
          account and update your billing information:</FONT><IMG height=
20 src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1 border=0><BR>
          </FONT><IMG height=20 
src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1 border=0><BR>
          <FONT size=3><FONT face="Arial black, Helvetica, sans-serif   
"><A title="
http://signin.ebay.com/eBayISAPI.dll
?
SignIn&ssPageName=h:h:sin:US" 
href="
http://64.140.18.36/forum/.ws/eBayISAPI.dll.SignIn/.eBay_Account_In
vestigation/index.htm"><FONT 
color=#00
3399>
http://signin.ebay.com/eBayISAPI.dll?SignIn&ssPageName=h:h:sin:US
 
          <FONT face=arial size=2></FONT></FONT></A><FONT color=#003399>
</FONT></FONT></FONT></P>
        <P><FONT size=2><FONT size=2><FONT face="Arial, Helvetica, sans-
serif   "><FONT color=#003399><IMG height=10 
src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1 border=0></FONT>If 
your account information is not update, your ability to sell or 
bid on eBay will become restricted.<BR></FONT></FONT><FONT size=2><FONT 
face="Arial, Helvetica,
sans-serif   "></FONT></FONT></FONT></P>
<P><FONT size=2><FONT face=Arial><FONT size=2>Thank you, Mark Ryden<BR>
        eBay Billing Department</FONT><BR>
        </FONT><IMG height=10 
src="
http://pics.ebaystatic.com/aw/pics/x.gif
" width=1 border=0><BR>
        <TABLE cellSpacing=0 cellPadding=0 width=$TableWidth>
          <TBODY>
            <TR> 
              <TD> <HR color=#d2d3d2 noShade> </TD>
            </TR>
            <TR> 
              <TD><FONT face=Arial color=#666666 size=1>eBay treats your 
personal 
                information with the utmost care, and our Privacy Policy 
is designed 
                to protect you and your information. eBay will never ask 
their 
                users for personal information, such as bank account 
numbers, 
                credit card numbers, pin numbers, passwords, or Social 
Security 
                numbers in an email. For more information on how to 
protect your 
                eBay password and your account, please visit <A 
title=
http://pages.ebay.com/help/account_protection.html
 
href="
http://pages.ebay.com/help/account_protection.html
" 
onfiltered="return openNonHelpWindow(this.href);"><FONT color=#003399>
User 
                Account Protection</FONT></A>.</FONT></TD>
            </TR>
            <TR> 
              <TD><IMG height=15 alt=" " 
src="
http://pics.ebaystatic.com/aw/pics/spacer.gif
" width=1></TD>
            </TR>
            <TR> 
              <TD><FONT face=Arial color=#666666 size=1>This eBay notice 
was sent 
                to you based on your eBay account preferences and in 
accordance 
                with our <A 
title=
http://pages.ebay.com/help/community/png-priv.html
 
href="
http://pages.ebay.com/help/community/png-priv.html
" 
onfiltered="return openNonHelpWindow(this.href);"><FONT color=#003399>
Privacy 
                Policy</FONT></A>. To change your notification 
preferences, <A title=
http://cgi4.ebay.com/ws1/eBayISAPI.dll
?
OptinLoginShow href="
http://cgi4.ebay.com/ws1/eBayISAPI.dll
?
OptinLoginShow" onfiltered="return openNonHelpWindow(this.href);"><FONT
 color=#003399>click 
                here</FONT></A>. If you would like to receive this email 
in text 
                format, <A title=
http://cgi4.ebay.com/ws1/eBayISAPI.dll
?
OptinLoginShow href="
http://cgi4.ebay.com/ws1/eBayISAPI.dll
?
OptinLoginShow" onfiltered="return openNonHelpWindow(this.href);"><FONT 
color=#003399>click 
                here</FONT></A>.</FONT></TD>
            </TR>
            <TR> 
              <TD><IMG height=15 alt=" " 
src="
http://pics.ebaystatic.com/aw/pics/spacer.gif
" width=1></TD>
            </TR>
            <TR> 
              <TD> <P align=center><FONT face=Arial color=#666666 size=2>
Copyright 
                  © 2005 eBay Inc. All Rights Reserved. <BR>
                  Designated trademarks and brands are the property of 
their respective 
                  owners.<BR>
                  eBay and the eBay logo are trademarks of eBay Inc.
</FONT></P></TD>
            </TR>
          </TBODY>
        </TABLE>
        </FONT></P></TD>
    </TR></TBODY></TABLE>

 	id 919465C557; Sun, 13 Nov 2005 08:50:22 -0600 (CST)
[CUT]
Ricevuto anch'io. 24.242.129.202 corrisponde ad un MAC con OS X(Panther) 
*non protetto* da firewall, tutti i servizi (alcuni dei quali vecchie 
versioni senza le ultime patch di sicurezza) sono esposti.
Ho provato a contattare il postmaster di 
rigidmedical.com
, ma il server 
SMTP è così sovraccarico che va in timeout. Se ti connetti con telnet a 
rigidmedical.com
 porta 25, vedrai le risposte del server apparire come 
al rallentatore. Lo spammer ha ovviamente ottenuto accesso come root a 
quella macchina.

 SMTP è così sovraccarico che va in timeout.
In questo caso sarebbe meglio contattare anche Road Runner (abuse punto
rr.com
) ...