Hackers invade eBay to steal bank details

Internet scams designed to con people into handing over confidential bank details are growing more common, security experts warned today.

Users of internet auction site eBay - along with customers of every major high street bank - are now being targeted by major crime syndicates.

The technique, known as "phishing", involves sending out fake emails purporting to be from a bank asking the user to click on a link to update their details.

If the user does so, they are sent to a phoney website designed to look identical to their bank's real site, and asked for their account details.

The gangs behind the scam then use any information revealed to withdraw money.

Security experts admit the fake sites can be difficult to spot. Graham Cluley, of antivirus company Sophos, said: "The hackers steal graphics and fonts from the real site and, if done properly, the fake site will be virtually identical. People need to be suspicious. Banks won't ask for all these details.

"They should always enter their bank's web address into their browser directly, rather than clicking on a link."

Gangs are sending out millions of fake emails to randomlygenerated addresses.

Fel icity Barr, of the National Hi-Tech Crime Unit, believes the scams are organised by large crime syndicates, possibly from Eastern Europe.

She said: "We have seen a big increase in these emails lately, and it is getting worse. Every bank has now been targeted.

"We are involved in several operations targeting phishers, and have had some success.

The gangs have a network of 'mules' who funnel the money in and out of various bank accounts.

"It is a global problem. We are working with forces in America, Australia, New Zealand and elsewhere.

"The biggest problem is the users. If they don't click on links in their email, there's no problem. It's very simple."