Scammers deploy bots for Ebay manipulation

Powered by SC Magazine
 

Scammers have turned to automated bots to create Ebay accounts with a positive feedback record, reports security vendor Fortinet.

Scammers have turned to automated bots to create Ebay accounts with a positive feedback record, reports security vendor Fortinet.

Online criminals use the automated scripts or bots to create vast collections of user accounts with positive feedback records. Those accounts can then be used to attract buyers by offering high value items that are never delivered after the bot-master criminals have received payments.

Ebay uses feedback ratings to allow its users to build up a reputation. Sellers with a low feed back typically deliver poor customer service or have failed to deliver goods. Buyers are also suspicious of sellers who lack any feedback, especially when it comes to buying and selling more expensive goods.

The bogus accounts typically sell virtual items such as wallpapers and e-books through a "buy it now" auction for one cent and no shipping costs. Those items are then bought by another fraudulent Ebay account, all in an automated fashion.

"Most [of the sellers'] user names are made of six to eight random letters and bear around 15 evaluations. Having a look at these profiles reveals that they’ve bought roughly the same items – all for one cent," Fortinet noted on its website.

Further indicating a level of automation, each buyer is leaving identical comments for each transaction.

"With that one cent rate, building 100 accounts with 15 positive feedbacks each costs US$15. And 100 accounts are a reasonably solid base to set up a good deal of bogus auctions."

The auctioning website is a popular target for online scam artists.

As reported last week, Ebay, together with its Paypal subsidiary, is the target of 75 percent of all phishing emails.

Copyright ©v3.co.uk


Scammers deploy bots for Ebay manipulation
 
 
 
Top Stories
Photos: iTnews Benchmark Awards countdown begins
Just a few days left until entries close for 2014.
 
Australian Govt to rethink cyber security strategy
Six-year old policy to be refreshed.
 
The failure of the antivirus industry
[Blog post] Insights from AVAR 2014.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 1040

Vote