Warning : Yahoo! users pls be careful...

jc84corvette · October 25, 2003, 19:47:33

Wow people are smart! Thanks for discovering this out!

Nick · October 25, 2003, 20:10:44

Hi kyo,

Thanks for the post. I have read about this type of scam also being used with eBay and ISP accounts. The same thing occurs, that is, the recipient is invited/instructed to update their credit card information. The next thing that happens is that someone has their card number and is racking up charges. The key is to be very wary of any email that wants your card number. Also, in a close case, do some cross-checking and verifying by phone or otherwise with the real company to see if they, in fact, sent such an email.

Very best,

jc84corvette · October 25, 2003, 21:03:09

Yes good point about the phone. I never buy online. It is always over the phone.

Makaveli · October 26, 2003, 00:32:21

Looks like a scam both sites have diffent ip's that aren't even in the same range.

yahoo.com (66.218.71.198)
Yahoo!
701 First Avenue
Sunnyvale, CA, 94089
US

Then there is:

yahoo-wallet.com (203.93.94.228)

When doing a traceroute it looks like they are also using different providers.

Nagual · October 26, 2003, 03:04:25

Not so well made scam...
First, the page go straight to "We encountered a billing error when attempting to renew your Yahoo!..."
Second, they don't ask the type of card... don't they need it?
Third, Bank routing and Checking account number should not be necessary.
Fourth, why the #@&€ would they need your card pin for???
Fith, they say that maybe the billing adress is incorrect; but they don't ask for it in the form!!!

Easy answer: Create a fake card and then go to the ATM and use the pin you happily gave them...

quote:
yahoo-wallet.com

Registrant:
Dank, Richard (GZYBRRKIQD)
65 Chenango dr
Jericho, NY 11753
US

Domain Name: YAHOO-WALLET.COM

Administrative Contact, Technical Contact:
Dank, Richard (35430048P) dirk0p@gmx.net
65 Chenango dr
Jericho, NY 11753
US
5164596167

Record expires on 14-Jun-2004.
Record created on 14-Jun-2003.
Database last updated on 26-Oct-2003 04:46:36 EST.

Domain servers in listed order:

NS1.MYDOMAIN.COM 64.94.117.195
NS2.MYDOMAIN.COM 216.52.121.228
NS3.MYDOMAIN.COM 66.150.161.130
NS4.MYDOMAIN.COM 63.251.83.74

The real one is with an extra 's' at the end:

quote:
Registrant:
Yahoo! Inc.
(DOM-334431)
701 First Avenue
Sunnyvale
CA
94089
US

Domain Name: yahoo-wallets.com

Registrar Name: Alldomains.com
Registrar Whois: whois.alldomains.com
Registrar Homepage: http://www.alldomains.com

Administrative Contact:
Domain Administrator
(NIC-1457976)
Yahoo! Inc.
701 First Avenue
Sunnyvale
CA
94089
US
domainadmin@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301
Technical Contact, Zone Contact:
Domain Administrator
(NIC-1457976)
Yahoo! Inc.
701 First Avenue
Sunnyvale
CA
94089
US
domainadmin@yahoo-inc.com
+1.4083493300
Fax- +1.4083493301

Created on..............: 2003-Oct-01.
Expires on..............: 2004-Oct-01.
Record last updated on..: 2003-Oct-01 15:36:41.

Domain servers in listed order:

NS1.YAHOO.COM 66.218.71.63
NS2.YAHOO.COM 66.163.169.170
NS3.YAHOO.COM 217.12.4.104
NS4.YAHOO.COM 63.250.206.138
NS5.YAHOO.COM 216.109.116.17

Nagual · October 26, 2003, 03:16:07

As usual, the site is hosted in china... Can't do much about it... [

!]

quote:
person: Suhua Du
address: Ji Tong Communications Co.,Ltd.
address: West Wing 6th Floor,
address: Zhongding Mansion,
address: Jia 18 West Street of North Road
address: Haidian District,Beijing P.R.China
country: CN
phone: +86-10-62227054
fax-no: +86-10-62219877
e-mail: dshua@public.gb.com.cn
nic-hdl: SD50-AP
mnt-by: MAINT-CHINAGBN-AP
changed: hostmaster@apnic.net 20000324
source: APNIC

Tisha · October 26, 2003, 04:50:17

Also, never, ever, ever give your credit card (or other personal) information over the e-mail! A reputable company simply would not, repeat, would not do this.

When a company I have dealt with online has run into problem with a credit card (wrong exp. date, etc), they have CALLED ME on the phone number I gave them, and gave me SPECIFIC information about my order, so that I knew it was really them.

Personally, online "wallet" services make me nervous. I don't use them! Maybe I'm just old [

]

Nagual · October 26, 2003, 09:37:47

I'm "young" and it makes me nervous too; especially since I understand a bit how it works and the limits of the system...

By example, when you give your CC number, the odds that it will be intercepted is low... But the odds that the company's database will get hacked and all the CC numbers stolen is a lot higher. That's why I always told the companies to delete my number after I made the purchase.

Now, I only use 1-time generated card numbers online... It's a "fake" CC number generated by the bank that will work for only 1 transaction. You can also restrict its use to only 1 company, for bills by example.

Mustardseed · October 26, 2003, 11:30:05

Wow very helpful thanks. I had my identity stolen 8months ago gave me a lot of trouble. Wonder who on earth wanna be me[

]

Mustardseed · October 26, 2003, 15:22:10

A friend just recieved this as well sounds like a bulk mailing thing going on

WalkerInTheWoods · October 27, 2003, 04:52:08

No matter how legit an email might be, it is always safest to go to the homepage and enter through there than to enter through links, just incase it is a scam. Good to get into this habit.

Anonymous · October 25, 2003, 19:39:01

I received the following e-mail, complete with the genuine Yahoo! logo and genuine Yahoo! links :

------------------------------------------------------------------

Dear Yahoo! User,

We encountered a billing error when attempting to renew your Yahoo! service. This type of error usually indicates that either the credit card you have on file has expired or that the billing address we have is not current.

This is your final notice. Please take a moment to update your credit card information by clicking here and submitting your information.

Please note that we will attempt to renew your service five days from today. If we are still unable to charge your credit card at that time, your service will be terminated.

Sincerely,
Yahoo! Billing Department

------------------------------------------------------------------

Sure, sounds like the real deal, and we all know Yahoo Wallet is the official financial component of Yahoo services... so I click on the link, which brings me to http://yahoo-wallet.com/

I was just filling up my credit card details, and about to hit the 'submit button', when quite suddenly, I received a strong telepathic instruction (it was a queer sensation) to "look up, to the top of the page", which I did.

The first thing that struck me, was how the lock-&-key logo was NOT highlighted, meaning that this was NOT a secure page.

Beginning to get suspicious, I did some checking, and I realized that the real Yahoo Wallet is located at :

http://wallet.yahoo.com/

and NOT

http://yahoo-wallet.com/

I then realized that this internet fraud organization has been sending out thousands of such e-mails to Yahoo! customers, to obtain their credit card details.

If you are a Yahoo! customer, please be careful in the future when it comes to such matters.

Kyo
http://infinity.hispeed.com/Heart.Of.God/forum/messages/1400.html

News:

Warning : Yahoo! users pls be careful...

Anonymous