So mad I could spit!

[duckhunter]

I'm writing this because I'm choked, but more because I'd like to prevent others from going through the same crap.

About three weeks ago I put an ad on Craigslist for a roommate. I dealt with and exposed the scammers who had nieces and nephews who wanted to stay with me, paying in advance with a bouncy cheque or money order. That didn't bother me. I had expected it.

This morning -- weeks later -- I received an email from Craigslist stating that there had been suspicious activity relating to my post and that they had suspended my account. Oh, I thought...a scammer has been playing with it. So I clicked the link and tried to log in. It didn't work. After trying a while I went back in and requested password help. This time I used my favorite email password for lack of creativity. That was dumb. I didn't log back in right away and therefore didn't realize anything was wrong. By mid afternoon I had not only lost complete control of my craigslist post but almost lost my email account too. Since then I've been phished twice more and possibly virused as well (thank goodness for system restore).

To those who think they can get away with playing their scammer, please think twice. I go out of my way to piss them off, but I use all fake details. Imagine how bad this would be if I didn't.


And they're still coming in -- just got this one (came with the bright pink warning banner)

This message looks very suspicious to our SmartScreen filters, so we've blocked attachments, pictures, and links for your safety.
Show content
Important Account Information


As part of our security measures, we regularly screen activity in the system. During a recent screening, we noticed an issue regarding
your account. Our system found unusual activity associated with your account that present a potential high risk

Case ID Number: PP-001-069-408-916

We've blocked access to your account. We'll review the limitation once you respond with the information we've requested.

https://accounts.craigslist.org/login?u ... cnt=update

Thank you!

[duckhunter]

Oh, by the way.....notice the cut and paste evidence.... ^^

Geez...been doing this for two years already and they still get me

[FrumpyBB]

Sorry to hear this, Duckie.

This morning -- weeks later -- I received an email from Craigslist stating that there had been suspicious activity relating to my post and that they had suspended my account.

Yes, THIS paragraph sounded strange and I suspected who the sender might have been even before I have finished reading that paragraph...but then, in retrospect it´s always easier.
The good thing is that Craigslist have reacted to it. If they had not, maybe you would not have found out before worse things would have happened.
Do you have the header and IP of the phishing email? Is it from one of our usual customers (i.e. check fraudsster trying a different angle) or maybe an Eastern European or Asian specialist?

[duckhunter]

Actually that was the funny part....no ip addresses on any of them. And Craigslist was no help at all . The only contacts I was able to find were automated responses. After I posted here I was able to finally regain control of the Craigslist post and delete it because the culprit didn't change the associated email address (which now has a new password) .

In the end there was no harm done other than to keep me busy for hours. The thing that really prevented this from becoming a fiasco was curiousity and determination. I hate to say it but I didn't figure out what was going on for a while.

[Marisa]

sorry, a bit confused here. So, is this URL you posted:
https://accounts.craigslist.org/login?u ... cnt=update
a real one or a fake one?

If it is a fake one, what is the real URL of craigs list?

if it is a real one, why would a scammer give url of a real site, and with a phishing warning, too??

[wayne]

Ducky, try hovering your mouse over the link you got to see if it's the same as what it says it is.

[Marisa]

...and if there is another URL there, that's what we need! NOT the real one. LOL

[duckhunter]

I have to admit that I'm confused now (I have a really bad cold at the moment so I'm feeling blonder than usual). I know I clicked on two links that brought up the big warnings -- one was a BMO mastercard phishing script, and one was Craigslist (not the first craigslist one tho). Right after I clicked both of them parts of my screen started going black and a few minutes later the computer froze completely. Went back in with safe mode and did a system restore. Now I'm not sure which one caused me the grief but I really don't want to click anything just in case. This is my daughter's laptop and she'd kill me if I messed it up.

It's also possible the one I posted here was real -- I requested password help 4 times. But the first one, which I may have deleted offered to review my suspension after I answered some questions. I never got a chance to do that. There were no questions at the end of the link.

And when I hover over this particular one (3rd one) it comes up something totally different from the second....something like laprensachicago....but the word craigslist is in there near the end. The second one says the same as the link. I can't figure out what I did with the first one. It's just gone.

[wayne]

It's the one that doesn't match what it shows in the email that we're interested in. If it helps, check out http://www.youtube.com/watch?v=y87nbliTtKY which will show you how to spot the phishing emails. If you post the dodgy URL then we can try to get it closed down.

[duckhunter]

The problem is that it's way too long ... I can only see the first part of it.