Lelong User ID & Password Phishing Attempts | Ramblings of an e-trader

Saturday, 15 September 2007

Lelong User ID & Password Phishing Attempts

A few members of Lelong reported that they received emails purportedly from Lelong aiming to phish for their Lelong User ID and password. Of course, seasoned internet users would be alert that the email is fraudulent even though it comes with the Lelong logo.

The email is signed off with the following:


Regards,
Customer Support (Trust and Safety Department)
LeLong Inc.

As you can see, Lelong does not have a Trust and Safety Department, unlike eBay and Lelong is not spelled Lelong. Also, private Malaysian companies are not "Inc." like in USA.

Think they are smart but they aren't really. There are always small errors which we can detect if we do not feel scared for a moment by the threat that our account will be suspended or terminated if we do not click on the link, and blindly click on it.

When in doubt, always open a new browser and manually type in the web address. This will minimize the risk, unless the scammers hijacked the domain name and point it to their fraudulent servers like the redirection trick that John Chow and John Cow played not too long ago.

And if still in doubt, you can always reach out to the Customer Service of Lelong, or eBay, or any other legitimate site that purportedly wants to suspend your account. Just open a ticket and include the header of the fraudulent mail so that they can check its authenticity.

One can never be too careful nowadays!

0 comments:

Post a Comment