Recently, I posted a job on craigslist for a senior systems and network engineer. Although craigslist is a popular site, I have never used it and had some concerns about posting on a site that has received so much bad press. After researching, I decided to post our job and have been very happy with the response. But it’s a jungle out there and I knew to expect some scam artists to use the ad to try an attack.
Then today, I received an email from updates-craigslist: Updates!New Terms – Accept: June 29, 2011 with the following message:
We need your help resolving an issue with your account. To give us time to work together on this, we’ve temporarily limited what you can do with your account until the issue is resolved.
We noticed some unusual activity .
How you can help?
You must reverify your account and take the time to accept and read our terms: log in here
It’s usually pretty easy to take care of things like this.
Ad: # 318-277-551-175
We understand it may be frustrating not to have full access to your account. We want to work with you to get your account back to normal as quickly as possible.
Copyright ©2011 Inc. All rights reserved. CL #73445897433\
It’s a scam and has all the characteristics (without typos) of a phishing attempt. It tries to get you to login with their fake link and get you to input your account information. Once your username/password was obtained, the phishers would take over your account and get as much information as they could about you. They can’t do much on craigslist except make some inappropriate postings under your name, but they could use the username/password to break into other accounts like Twitter, Facebook or bank accounts.
So as a reminder, don’t fall for email scams. When in doubt – don’t click, reply or forward. Use strong passwords and make sure you have a good spam filter and malware protection.