Return to the Cloudy Nights Telescope Reviews home pageAstronomics discounts for Cloudy Nights members
· Get a Cloudy Nights T-Shirt · Submit a Review / Article

Click here if you are having trouble logging into the forums

Privacy Policy | Please read our Terms of Service | Signup and Troubleshooting FAQ | Problems? PM a Red or a Green Gu… uh, User

Equipment Discussions >> Binoculars

Pages: 1 | 2 | (show all)
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
A Binocular Related Virus Warning...
      #5762395 - 03/28/13 01:19 PM

For anyone here who hawks eBay on a regular basis...

So far eBay has been pretty good about removing these items within about 30 minutes or so of being listed, but this seems dangerous enough that it should be mentioned. I've stumbled onto 5 auctions for expensive binoculars that would immediately re-direct my browser to another site that looks like eBay but clearly isn't. They are apparently looking for buyers with larger wallets so as to make some significant amounts of cash. The two items that I've seen being sold are a "Zeiss 20x60 Image Stabilized Binoculars" and a "Kollmorgen 20x120 Binoculars," both being listed for $2500 USD Buy-It-Now. When you click on the listing from the search list you get redirected to a site called rgaoks2.com, which was registered two days ago out of California, but I think there have been other website redirects as well because this has been going on for almost a week now. When I click to add the item to my watch list I immediately get taken to the Buy-It-Now screen. They clearly want you to buy it and then pay for it, making you log-in to PayPal so that they can get your log-in name and password and then go drain your account. At least that would be the more likely scenario.

But whatever, just be careful since it seems they are targeting us in particular...

Edited by SMark (03/28/13 01:36 PM)


Post Extras: Print Post   Remind Me!   Notify Moderator  
hallelujah
Post Laureate
*****

Reged: 07/14/06

Loc: North Star over Colorado
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762400 - 03/28/13 01:24 PM

Mark,

Thanks very much for the heads up.

Did you also notify eBay?

Stan


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: hallelujah]
      #5762415 - 03/28/13 01:35 PM

I just refreshed my search list and the items are now gone, so eBay again caught them and removed them after about 30 minutes or so. But these scamsters are being persistent so I'm sure they will be back again soon.

Post Extras: Print Post   Remind Me!   Notify Moderator  
KennyJ
The British Flash
*****

Reged: 04/27/03

Loc: Lancashire UK
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762419 - 03/28/13 01:39 PM

Thanks for the notification.

I think I once caught a virus from an old Russian binocular that had been kept shut up in a fusty case for around 30 years!


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: KennyJ]
      #5762429 - 03/28/13 01:43 PM

Quote:

Thanks for the notification.

I think I once caught a virus from an old Russian binocular that had been kept shut up in a fusty case for around 30 years!




LOL!

I was waiting on you Kenny!


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762440 - 03/28/13 01:50 PM

Quote:

I just refreshed my search list and the items are now gone, so eBay again caught them and removed them after about 30 minutes or so. But these scamsters are being persistent so I'm sure they will be back again soon.




Actually... eBay has only removed the items from the search lists, the items themselves are still there. BUT... eBay has disabled the Buy-It-Now feature and it says at the top of the listing that the "Seller is currently away until March 31."

When I clicked on Buy-It-Now I got this message... "Sorry, this seller is on vacation, so this item is unavailable for purchase."

Clever...


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762461 - 03/28/13 01:59 PM

Another interesting thing is that these scamsters had apparently hacked into an eBay account for "Bullseye Dart Supply" out of Philadelphia, PA (USA) so now all of their listings (which are all for dart supplies other than those two binoculars) are unavailable for purchase.

Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762502 - 03/28/13 02:24 PM

Another interesting twist...

I just hit the Buy-It-Now button again to show my son that message, but THIS TIME I was directed to the eBay log-in screen @ rgaoks2.com. I am already logged-in and shouldn't need to log-in again. So it appears that they may be looking to get their next eBay account to hack for their next wave of scams...


Post Extras: Print Post   Remind Me!   Notify Moderator  
Simon S
Carpal Tunnel
*****

Reged: 01/07/07

Loc: Crawley West Sussex UK
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762701 - 03/28/13 04:46 PM

Has you computer been checked for viruses and malware?

Post Extras: Print Post   Remind Me!   Notify Moderator  
hallelujah
Post Laureate
*****

Reged: 07/14/06

Loc: North Star over Colorado
Re: A Binocular Related Virus Warning... new [Re: SMark]
      #5762715 - 03/28/13 04:58 PM

http://www.lavasoft.com/products/ad_aware_free.php

Post Extras: Print Post   Remind Me!   Notify Moderator  
KennyJ
The British Flash
*****

Reged: 04/27/03

Loc: Lancashire UK
Re: A Binocular Related Virus Warning... new [Re: hallelujah]
      #5762848 - 03/28/13 06:05 PM

Just clicking onto THIS thread here at CN causes my PC to emit a faint but distinct odour of eau de halibut.

Like Mark himself,I would also describe what he's discovering as interesting twists.

I know an interesting twist when I see one, the most recent being on the dance floor at a wedding reception,by the best man and chief bridesmaid.


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... new [Re: Simon S]
      #5763180 - 03/28/13 08:59 PM

Quote:

Has you computer been checked for viruses and malware?




Yeah, I did two different malware scans after I posted all this. So I appear to be fine.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Jarrod
Pooh-Bah
*****

Reged: 01/20/13

Loc: SE USA
Re: A Binocular Related Virus Warning... [Re: SMark]
      #5763263 - 03/28/13 09:55 PM

Not a week ago my wife's eBay account was hacked and taken over for the purpose of buying cellphones with stolen Paypal accounts. Be careful out there!

Post Extras: Print Post   Remind Me!   Notify Moderator  
daniel_h
Carpal Tunnel
*****

Reged: 03/08/08

Loc: VIC, Australia
Re: A Binocular Related Virus Warning... [Re: Jarrod]
      #5763379 - 03/28/13 11:05 PM

interesting

Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... [Re: Jarrod]
      #5763397 - 03/28/13 11:18 PM

Quote:

Not a week ago my wife's eBay account was hacked and taken over for the purpose of buying cellphones with stolen Paypal accounts. Be careful out there!




Yeah, I also changed my (already long) eBay password today and added 5 more digits to it as well.


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... [Re: SMark]
      #5786755 - 04/08/13 08:12 PM

Both items were just re-listed again, just as they were previously, except the new website that you get routed to is /127.0.0.1:2372/ which I have not looked up, but one of my anti-malware programs picked up on it right away.

Just FYI...

Edited by SMark (04/08/13 08:13 PM)


Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... [Re: SMark]
      #5787201 - 04/09/13 12:36 AM

Quote:

Both items were just re-listed again, just as they were previously, except the new website that you get routed to is /127.0.0.1:2372/ which I have not looked up, but one of my anti-malware programs picked up on it right away.

Just FYI...




Actually it's called "poiuaj2sa22.com" and was registered late last night out of Bellevue Washington.

Again, eBay shut them down fairly quickly.


Post Extras: Print Post   Remind Me!   Notify Moderator  
Vondragonnoggin
Post Laureate
*****

Reged: 02/21/10

Loc: Southern CA, USA
Re: A Binocular Related Virus Warning... [Re: SMark]
      #5787313 - 04/09/13 03:06 AM

Just an FYI about ip addressing. 127.0.0.1 is what is known as a loopback address or localhost address. That is an address which you would use to access something on your own computer. In other words you were redirected to port 2372 on your own computer. You should run further malware scans.

Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... [Re: Vondragonnoggin]
      #5788409 - 04/09/13 03:04 PM

Thanx. My scans show that I'm still clean. One of my malware programs actually caught the redirect and stopped it before it happened, while at the same time telling me that "poiuaj2sa22.com" was the intended destination.

Post Extras: Print Post   Remind Me!   Notify Moderator  
SMark
scholastic sledgehammer
*****

Reged: 08/29/11

Loc: Atlanta, GA USA
Re: A Binocular Related Virus Warning... [Re: SMark]
      #5803029 - 04/16/13 04:24 PM

They are back at it again, this time with a more traditional approach. They just want you contact them off site and pay them directly.

No redirects this time. But I did report it to eBay so it should be gone shortly. Only the one listing this time for the Zeiss 20x60S.

HA! I was wondering how they managed to get by the eBay text monitors which will normally stop the listing if they catch certain words or phrases. I turns out that the "text" they put in the listing is actually a picture of the text, so the monitors can't read it...

Edited by SMark (04/16/13 04:31 PM)


Post Extras: Print Post   Remind Me!   Notify Moderator  
Pages: 1 | 2 | (show all)


Extra information
14 registered and 36 anonymous users are browsing this forum.

Moderator:  Greyhaven, Knuklhdastrnmr, WOBentley 

Print Thread

Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      UBBCode is enabled


Thread views: 1914

Jump to

CN Forums Home


Cloudy Nights LLC
Cloudy Nights Sponsor: Astronomics