TUCoPS :: Hacking Techniques
:: EBAYISAP.HTM
Typical fake login page used by Phishers (identity thieves) operating on eBay users
The "real" version of this page from eBay is normally not secure (https://) so eBay's admonishments to
look for a secure connection to assure that an eBay page is the real thing is rather pointless with this
page. Also, although this example doesn't use the technique, it is possible in Javascript to place a fake
address in the address bar of the user's browser, hiding the real URL of this file, and making eBay's
advice to look for "https://cgi6.ebay/com....." likewise ineffective.
|