craigslist scam.. how's this work?

[ddlewis]

I post an ad to sell my bike yesterday.  A guy responds with questions using strange wording/grammer.  Odd - so I answer but don't give my cell number (which I normally would) instead tell him to feel free to email any other questions.

He immediately responds with this phishing link:
Edit by Marsh: I suggest not clicking this link while running the Internet Explorer browser...I actually suggest not clicking it at all...http://account.privacy-craiglist-motorcycles.org/post-192497548.html
(it looks like the login to a craigslist account page)

So IF I bit on it, he would have my craigslist account.. big deal.  Why would he bother to try to get someones craigslist account info?  In hopes to leverage it to get into email, etc hoping password is the same?  

[Travis398]

Enter Password Here ______________ 

[Yamifj1200]

What bike ya selling lad?? The Honda??

Eric M

[Marsh White]

Whatever it is - you can list it here as well if you like - the bikes for sale section is not just limited to FJs...

[ddlewis]

No the vstrom.  Thought I had it sold by word of mouth, but looks like not.  If you know anybody looking for such a thing, send 'em my way.  Here my ad
http://richmond.craigslist.org/mcy/2188179651.html

[ddlewis]

Whatever it is - you can list it here as well if you like - the bikes for sale section is not just limited to FJs...

ah crap.. for sale section, didnt' realize there was one.  feel free to delete or move if you want.

[Travis398]

the bikes for sale section is not just limited to FJs...

It is recommended However, that if you post pictures they are of the actual bike for sale.

[andyb]

bwahahhahaha

Here's a site that looks almost related to CL, but isn't at all.  Please put in your password.  Note that half the links on that faked page go to CL, and some go to their own little page. 

Classic, classic scam.

[Travis398]

b]Edit by Marsh: I suggest not clicking this link while running the Internet Explorer browser...I actually suggest not clicking it at all...[/b]http://account.privacy-craiglist-motorcycles.org/post-192497548.html
(it looks like the login to a craigslist account page)

Now you tell us. Did I get infected?

[Marsh White]

b]Edit by Marsh: I suggest not clicking this link while running the Internet Explorer browser...I actually suggest not clicking it at all...[/b]http://account.privacy-craiglist-motorcycles.org/post-192497548.html
(it looks like the login to a craigslist account page)

Now you tell us. Did I get infected?

Probably not - I didn't check out all of the source code because I'm busy working.  It was more of a precautionary warning.  There are some new IE exploits out that just became public.  Maybe Andy can take a look on his Linux machine...either way...not clicking on it is good advice....and I just wanted to pass it along.

[ddlewis]

I looked at that htm after I clicked it..  Nothing too sinister looking.  done.php scraping the logins at their end.   In retrospect shouldn't have posted the link.

Of course it could just be way sophisticated and now I've killed Travis.  Durn me!

[rktmanfj]

I looked at that htm after I clicked it..  Nothing too sinister looking.  done.php scraping the logins at their end.   In retrospect shouldn't have posted the link.

Of course it could just be way sophisticated and now I've killed Travis.  Durn me!

Nah, Travis probably infected THEM.     

Randy T
Indy

[Dan Filetti]

Enter Password Here ______________ 

I always use this one "noneofyourdamnbusiness" when i see this crap.

Have you folks seen this?:

http://www.ebolamonkeyman.com/

I really enjoy reading this type of crap, where they toy with these morons....

Dan

[carsick]

Enter Password Here ______________ 

Is that how that guy got YOUR bike?