Help & FAQs    Search BCF    Members    Groups    Events Calendar
Resend my activation email : Register : Log in 
BCF: Bike Chat Forums


Another Gumtree Scam

 Reply to topic
Bike Chat Forums Index -> General Bike Chat
View previous topic : View next topic  
Author Message

Knacker
World Chat Champion



Joined: 31 Mar 2008
Karma :
PostPosted: 18:59 - 03 Sep 2014    Post subject: Another Gumtree Scam Reply with quote
Had the bike on Gumtree for just over a week now and had a few idiots enquiring, when today I received and email claiming to be from Gumtree stating that someone "Wants to buy my gumtree ad" instantly sounded weird

https://i210.photobucket.com/albums/bb259/Squeaky_86_2007/imagejpg1-15.jpg

And suprise suprise when you click on the link it directs you to a exact Gumtree replica of the Gumtree log in page so I logged in and it brought this up

https://i210.photobucket.com/albums/bb259/Squeaky_86_2007/imagejpg1-16.jpg

I didn't enter any details whatsoever and it came up with

https://i210.photobucket.com/albums/bb259/Squeaky_86_2007/imagejpg1-17.jpg


And instantly knew it was a scam so reported it to Gumtree and thought I'd post it up in here for anyone Selling on Gumtree as it did look very convincing as the pages are exactly the same as they are on Gumtree.

I know most people would've clicked straight away but just thought I'd make people aware.
____________________
Current: Gsxr 600 Srad - GS125 - DT125
Previous: K1 GSXR 1000
 Back to top
View user's profile Send private message You must be logged in to rate posts

PattJakk
Two Stroke Sniffer



Joined: 02 Jul 2014
Karma :
PostPosted: 19:11 - 03 Sep 2014    Post subject: Reply with quote
Thanks for the heads up. I posted an ad on Gumtree today and it took 13 mins before I had a lady who lives in Brazil email me and ask if she could pay for the bike by PayPal and she would send her courier around to collect it. Rolling Eyes

Frustrating place to sell!
____________________
Past: Honda CBF125
Present: Honda CBR600F
CBT 18/03/14 | Theory 25/03/14 | Mod 1 21/08/14 | Mod 2 01/09/14
 Back to top
View user's profile Send private message You must be logged in to rate posts

dydey90
World Chat Champion



Joined: 01 Oct 2013
Karma :
PostPosted: 19:11 - 03 Sep 2014    Post subject: Reply with quote
YOU CLICKED THE LINK?!
____________________
This post is probably not serious and shouldn't be taken literally.
Past: CBR125,ER6f NINJA 650, ZZR600 Current: VFR750
 Back to top
View user's profile Send private message You must be logged in to rate posts

Rogerborg
nimbA



Joined: 26 Oct 2010
Karma :
PostPosted: 19:18 - 03 Sep 2014    Post subject: Reply with quote
Your money all have been stoled!

That is a cut about the usual "oil rig" drivel, mind. I await a similar one with interest. Thumbs Up

Hint, hint.
vvvvvvvv
____________________
Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike

Last edited by Rogerborg on 19:18 - 03 Sep 2014; edited 1 time in total
 Back to top
View user's profile Send private message You must be logged in to rate posts
MC This post is not being displayed because the poster is banned. Unhide this post / all posts.

BigDan1190
Could Be A Chat Bot



Joined: 03 Mar 2010
Karma :
PostPosted: 19:18 - 03 Sep 2014    Post subject: Reply with quote
dydey90 wrote:
YOU CLICKED THE LINK?!


Also, you said you typed in some details for it to log in?

I'd change your Gumtree password if I were you.
 Back to top
View user's profile Send private message Visit poster's website You must be logged in to rate posts

Knacker
World Chat Champion



Joined: 31 Mar 2008
Karma :
PostPosted: 19:23 - 03 Sep 2014    Post subject: Reply with quote
BigDan1190 wrote:
dydey90 wrote:
YOU CLICKED THE LINK?!


Also, you said you typed in some details for it to log in?

I'd change your Gumtree password if I were you.


Yes I clicked the Link
Yes I entered my password
Yes Iv changed said Password

Gumtree doesn't have any of my details except an email address.
____________________
Current: Gsxr 600 Srad - GS125 - DT125
Previous: K1 GSXR 1000
 Back to top
View user's profile Send private message You must be logged in to rate posts

Rogerborg
nimbA



Joined: 26 Oct 2010
Karma :
PostPosted: 19:24 - 03 Sep 2014    Post subject: Reply with quote
BigDan1190 wrote:
Also, you said you typed in some details for it to log in?

No, who would be daft enough to...

Knacker wrote:
And suprise suprise when you click on the link it directs you to a exact Gumtree replica of the Gumtree log in page so I logged in

...

https://img.photobucket.com/albums/v602/mori/you-gonna-get-raped.jpg
____________________
Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike
 Back to top
View user's profile Send private message You must be logged in to rate posts

Knacker
World Chat Champion



Joined: 31 Mar 2008
Karma :
PostPosted: 19:25 - 03 Sep 2014    Post subject: Reply with quote
Oh noes they haz an email address Crying or Very sad
____________________
Current: Gsxr 600 Srad - GS125 - DT125
Previous: K1 GSXR 1000
 Back to top
View user's profile Send private message You must be logged in to rate posts

iooi
Super Spammer



Joined: 14 Jan 2007
Karma :
PostPosted: 05:15 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
Knacker wrote:

I know most people would've clicked straight away but just thought I'd make people aware.


NO... Most people will simply delete the email.... Rolling Eyes

No doubt that when you clicked the link, it was loading it was and installing a key loger.
So do not be surprised if you get all sorts of accounts hacked now Embarassed
____________________
Just because my bike was A DIVVY, does not mean i am......
 Back to top
View user's profile Send private message You must be logged in to rate posts

CieL
Brolly Dolly



Joined: 22 Jul 2014
Karma :
PostPosted: 11:06 - 04 Sep 2014    Post subject: Reply with quote
Back in my programing days we used to have a laptop set up just to click and investigate this kind of links and most antivirus programs would block any attempt of automatic downloads to the machine and some of them would even block access to the suspicious page.

As long as you have a decent active shield antivirus (even avast does the job) and you don't give out sensitive information on forms and s**t you shouldn't really worry about clicking things. That being said, use some f**king common sense, that's why it's there... Wink
____________________
Semper Paratus
 Back to top
View user's profile Send private message You must be logged in to rate posts

Dalemac
World Chat Champion



Joined: 15 Oct 2006
Karma :
PostPosted: 11:16 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
iooi wrote:
Knacker wrote:

I know most people would've clicked straight away but just thought I'd make people aware.


NO... Most people will simply delete the email.... Rolling Eyes

No doubt that when you clicked the link, it was loading it was and installing a key loger.
So do not be surprised if you get all sorts of accounts hacked now Embarassed


Please - explain the process in how a website would install a keylogger onto a remote client over HTTP without the browser thinking it is a download and you then having to actually open and install it manually.

At best the site could use Javascript to read any keypresses in input fields, so even if you entered your username and password without pressing the sign-in button, they could still work out your credentials.
____________________
YBR125 -> GPZ500S -> SL1000
 Back to top
View user's profile Send private message You must be logged in to rate posts

chris-red
Have you considered a TDM?



Joined: 21 Sep 2005
Karma :
PostPosted: 12:17 - 04 Sep 2014    Post subject: Reply with quote
Do you use the same password for multiple sites? If so your eBay, Amazing etc. will be targeted.
____________________
Well, you know what they say. If you want to save the world, you have to push a few old ladies down the stairs.
Skudd:- Perhaps she just thinks you are a window licker and is being nice just in case she becomes another Jill Dando.
WANTED:- Fujinon (Fuji) M42 (Screw on) lenses, let me know if you have anything.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Stay Hazed
Two Stroke Sniffer



Joined: 13 Jul 2014
Karma :
PostPosted: 12:42 - 04 Sep 2014    Post subject: Reply with quote
It's called a 'phisher'. Fake web page which will most likely have a PHP script to redirect the page, storing the info in a txt file on the server it's hosted with the info you've input.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Stay Hazed
Two Stroke Sniffer



Joined: 13 Jul 2014
Karma :
PostPosted: 12:58 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
Please - explain the process in how a website would install a keylogger onto a remote client over HTTP without the browser thinking it is a download and you then having to actually open and install it manually.

At best the site could use Javascript to read any keypresses in input fields, so even if you entered your username and password without pressing the sign-in button, they could still work out your credentials.[/quote]

Silent install. It can be done.
 Back to top
View user's profile Send private message You must be logged in to rate posts

TQ
Trackday Trickster



Joined: 17 Dec 2009
Karma :
PostPosted: 13:26 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
Quote:
XR_Stevie wrote:
Please - explain the process in how a website would install a keylogger onto a remote client over HTTP without the browser thinking it is a download and you then having to actually open and install it manually.

At best the site could use Javascript to read any keypresses in input fields, so even if you entered your username and password without pressing the sign-in button, they could still work out your credentials.


Silent install. It can be done.


Bollocks.

There's a small possibility this may be possible through an unpatched exploit in the browser but it is very unlikely, do you have anything to back up your claim other than just saying "it can be done"?
____________________
First Bike :Gilera DNA 50 | Second: Imported 1989 NSR125
Third: 1998 Yamaha XJ600N | Currently: 1999 Yamaha FZS600
 Back to top
View user's profile Send private message You must be logged in to rate posts

Stay Hazed
Two Stroke Sniffer



Joined: 13 Jul 2014
Karma :
PostPosted: 13:38 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
TQ wrote:
Quote:


At best the site could use Javascript to read any keypresses in input fields, so even if you entered your username and password without pressing the sign-in button, they could still work out your credentials.


Silent install. It can be done.


Bollocks.

There's a small possibility this may be possible through an unpatched exploit in the browser but it is very unlikely, do you have anything to back up your claim other than just saying "it can be done"?[/quote]

It's not very unlikely to be honest, there's exploits all around that aren't patched, obviously we arent going to know about them until they release a security patch and even then they'll try and keep it quiet. I'm not saying it'll happen, but there's scope for it to happen obviously.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Knacker
World Chat Champion



Joined: 31 Mar 2008
Karma :
PostPosted: 14:27 - 04 Sep 2014    Post subject: Reply with quote
Was all through my ipad/iPhone which I'm led to believe has decent AV Software.

The email address they have is just what I use for Signing upto forums or stuff i don't really use very often. It's not linked to my PayPal or anything else remotely important.

Typical BCF though, Post something up which people might find useful and starts WW3 Rolling Eyes
____________________
Current: Gsxr 600 Srad - GS125 - DT125
Previous: K1 GSXR 1000
 Back to top
View user's profile Send private message You must be logged in to rate posts

Rogerborg
nimbA



Joined: 26 Oct 2010
Karma :
PostPosted: 15:24 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
XR_Stevie wrote:
It's not very unlikely to be honest

Then you'll have no problems listing 5 key loggers that install silently and remotely just by following a link.

It's OK, we'll wait while you put that list together. Any modern platform you like, don't make it too hard on yourself.
____________________
Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike
 Back to top
View user's profile Send private message You must be logged in to rate posts

Stay Hazed
Two Stroke Sniffer



Joined: 13 Jul 2014
Karma :
PostPosted: 17:52 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
Rogerborg wrote:
XR_Stevie wrote:
It's not very unlikely to be honest

Then you'll have no problems listing 5 key loggers that install silently and remotely just by following a link.

It's OK, we'll wait while you put that list together. Any modern platform you like, don't make it too hard on yourself.


Simple keyloggers aren't usually sophisticated enough to do that, but if these people are after bank info it'd be a private exploit kit, similar to those of Zeus, BlackHole, they're not known to the world, hence why they aren't detected. People seem to think an anti virus will stop anything, there's vast amount of said malware that are FUD, fully undetectable, that go under the net of the anti virus. I'm not here to cause or have an argument, I enjoy browsing the forums to be honest, I was just stating a point. Over & out.
 Back to top
View user's profile Send private message You must be logged in to rate posts

Islander
World Chat Champion



Joined: 05 Aug 2012
Karma :
PostPosted: 20:13 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
XR_Stevie wrote:
Rogerborg wrote:

Then you'll have no problems listing 5 key loggers that install silently and remotely just by following a link.

It's OK, we'll wait while you put that list together. Any modern platform you like, don't make it too hard on yourself.


Simple keyloggers aren't usually sophisticated enough to do that, but if these people are after bank info it'd be a private exploit kit, similar to those of Zeus, BlackHole, they're not known to the world, hence why they aren't detected. People seem to think an anti virus will stop anything, there's vast amount of said malware that are FUD, fully undetectable, that go under the net of the anti virus. I'm not here to cause or have an argument, I enjoy browsing the forums to be honest, I was just stating a point. Over & out.


FUD is right. As in Fear, Uncertainty and Doubt - which is what InfoSecs (like me) call posts like this, and is also what FUD actually means. A push install is possible but highly unlikely from an exploit of this nature. This is clearly a phishing exercise - not a sophisticated hack attempt. Any malware needs an exploit to operate on and in this case the exploit is one of social engineering.

Respond to Rogerborg's challenge if you can - because I can't and I deal with this stuff every day.

OP, change your password and if you use it on any other online accounts change those too - to different passwords and don't use the same one for multiple accounts again. Job done. Thumbs Up
 Back to top
View user's profile Send private message You must be logged in to rate posts

mentalboy
World Chat Champion



Joined: 05 May 2012
Karma :
PostPosted: 21:05 - 04 Sep 2014    Post subject: Reply with quote
Next time, if you suspect skulduggery, open new browser page, enter your gumtree, etc account in the normal fashion see if there's any such stuff in your account details and if not forward suspect email to the relevant department as listed on their genuine page.
____________________
Make mine a Corona.
 Back to top
View user's profile Send private message Send e-mail You must be logged in to rate posts

Rogerborg
nimbA



Joined: 26 Oct 2010
Karma :
PostPosted: 21:20 - 04 Sep 2014    Post subject: Re: Another Gumtree Scam Reply with quote
XR_Stevie wrote:
Rogerborg wrote:
you'll have no problems listing 5 key loggers that install silently and remotely just by following a link.

there's vast amount of said malware that are FUD, fully undetectable, that go under the net of the anti virus.

Name five that you know of. Not "similar to", name five keyloggers that can be silently installed, remotely, by following a link.

If you don't know of them, then on what informed basis are you gobbing off about them?

Did you hear it from your uncle who was in the SAS?
____________________
Biking is 1/20th as dangerous as horse riding.
GONE: HN125-8, LF-250B, GPz 305, GPZ 500S, Burgman 400 // RIDING: F650GS (800 twin), Royal Enfield Bullet Electra 500 AVL, Ninja 250R because racebike
 Back to top
View user's profile Send private message You must be logged in to rate posts
Old Thread Alert!

The last post was made 11 years, 310 days ago. Instead of replying here, would creating a new thread be more useful?
  Display posts from previous:   
This page may contain affiliate links, which means we may earn a small commission if a visitor clicks through and makes a purchase. By clicking on an affiliate link, you accept that third-party cookies will be set.

Post new topic   Reply to topic    Bike Chat Forums Index -> General Bike Chat All times are GMT + 1 Hour
Page 1 of 1

 
 You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum

Read the Terms of Use! - Powered by phpBB © phpBB Group
 
Debug Mode: ON - Server: birks (www) - Page Generation Time: 0.22 Sec - Server Load: 1.39 - MySQL Queries: 13 - Page Size: 127.25 Kb