Ebay hacked... be carefull

Bluehair

Very bad news for ebay i'm not sure how they pulled this one off. Bear in mind i was already signed into ebay.co.uk when i did this search.

Goto ebay.co.uk and do a search for 'xk8' in 'car, parts and vehicles'.

One of the results is "2006 jaguar xk8" with a picture of a girl instead of a car but when you simply click on this result it directs you to re-enter your username and password except this time (thankfully) i noticed the address was http://adadasadfhsjkaskjas.50megs.com/main.html . DON'T ENTER YOUR DETAILS HERE!

Obviously it's setup to harvest usernames and passwords but how exactly he managed to redirect from a genuine ebay search return i don't know.

wba88

Bas**rds! they r just making it harder for ppl to trust buying/selling on the net!

Bluehair

I'm bloody amazed they pulled this off since there are obviously using an exploit partially exposed last year (but one that still started from a dodgy email).

Depending on how many types of 'results' they have put on ebay there could easily be thousands upon thousands that would fall for this one.

It's not uncommon for ebay to ask you to sign-in/verify especially when sending messages sometimes so i don't think many people will blink an eye when getting this page especially since you are clicking on a legitimate search result!

Ruu_Old

I assume someones reported this by now. I've seen this before alright, very clever. I clicked the link there and the google toolbar I have on told me not to go near it (not that I was going to as I'm a veteran eBayer at this stage)

iFight

Thanks for the warning. Fairly clever

spurious

I reported it when I saw this thread.
Those ebay boys move fast - the listing is gone now.

Scary that they managed to do it at all though.

Bluehair

spurious wrote:

I reported it when I saw this thread.
Those ebay boys move fast - the listing is gone now.

Scary that they managed to do it at all though.

They're way behind on this one.

Do a search for '2006' now in 'cars, part and vehicles' and you'll get quite a few returns along these lines (the cars vary, range rover sport, elise, audi etc) with pictures of girls doing naughty things.

I've no doubt there are many more non-car related results out there. This ain't gonna be pretty...

DermoMIO

i just did the first search but it straight away brought me to that page and no results but FF blocked it

spurious

Their 'live' team are tackling it now.