Recent eBay phishing expedition now apparently fixed

[rkawakami]

https://ret2libc.wordpress.com/2016/01/ ... -response/
https://nakedsecurity.sophos.com/2016/0 ... g-attacks/
http://www.pymnts.com/news/2016/ebay-se ... o-hackers/

In short, there was a hole in eBay's XSS (Cross-site scripting) system which allowed hackers to inject their own code. It was possible to offer up what looked like a real eBay page but it's hidden purpose was to siphon off your login details (username/password). According to the articles, the hole was plugged this past Monday. If you were recently directed to log into your eBay account via some unexpected email message, with a convenient link enclosed, I would change your password.

[emeraldgirl08]

PW changed just in case. Thanks for the info Ray!