Ebay Hacker Sells Administrator Passwords...Ebay 'Claim' to Have Fixed Security Hole Exploited by 'V

[astros99]

It appears that a hacker named Vladuz had winnowed his way into the upper reaches of Ebay. Getting access to areas that allow everything from the redirection of funds in Ebay and Paypal to reading email and posting fraudulent auctions. He also appears to be selling this to various other hackers. They tend to use fraudulent listings to get you to send money. The hacking plugin allows one to have access to Ebay's control utilities database. Ebay's stock is as yet unaffected. -Follow Up- Ebay has claimed to have fixed a security hole on their front page that allowed scammers to hijack Ebay accounts. There has been no comment to verify if the potential to redirect within listings has been fixed.

[mini_0]

This is not the first time such an attack has been attempted on eBay users. In March, phishers launched an almost identical redirect-style attack, which spoofed the sign-on page itself. Mutton said he considered the latest attack more subtle as it manipulated the real sign-on page, and would therefore be harder for users to detect.