We are receiving copies of an email that claims to be a
legitimate mail from Ebay. The content of the email talks about
calculations of payments to Ebay(in German language). It tells the
user to check on the calculations of the user’s Ebay payments in
the attached file which is claimed to be a pdf file but is actually
an executable file. The executable file is to be detected as
TROJ_YABE.K.
Below is a preview of the spammed email.
And of course some translations with the aid of Babelfish.
=)
Good day,
here a summary of the account activities is since your last
calculation
In the settled pdf file you find the exact listing of their
calculation
Payment method
They are announced for the lastschriftverfahren. The invoice amount
is deducted within the next five to seven days by your bank
account. (the amount of deduction can deviate from your invoice
amount, if you made payments in the period between the account
creation and the deduction date or received credit notes.)
Reference
Default fees: If your eBay account is overdue results a default
fee. In order to experience details to this topic, you go please to
calculations and payments.
(http://pages.ebay.de/help/account/payfees.html)
More about eBay fees
(http://pages.ebay.de/help/sell/fees.html)
Reports
Note: eBay never asks by E-Mail for confidential or personal data
(e.g. password, credit card, account number).
Helpful one link
For the answer of your questions to your eBay account you use
please the following link:
http://pages.ebay.de/help/account/selling-account-overview.html
In order to update your member data, you use please the following
link:
http://cgi4.ebay.de/aw-cgi/eBayISAPI.dll?ChangeRegistrationShow
In order to contact eBay, you use please the following link:
http://pages.ebay.de/help/contact_inline/index.html
Yours sincerely
eBay internationally AG
Additional reports
the achievements specified above exclusively refer to your
registration under www.ebay.de.
Users are advised not to open and execute attachments from
unsolicited emails. The network administrators may also want to
block emails shown above to prevent their client users from
receiving a copy and thus, lessen the chance the malware be
executed. Lastly, keep your pattern files updated for protection
from new malware threats.