Scot Wingo, over at http://ebaystrategies.blogs.com/ebay_strategies/ has discovered further spoofing attempts which take advantage of eBay users once again. Unlike more traditional spoof emails, which many users are becoming alert to these spoofing attempt actually redirects to users from the official eBay site to a spoof site.

Phishers are using eBay to put up tempting fake listings, such as low priced buy-it-now items or even porn listings, which encourage users to click on the title as normal to view the item. Once this listing loads, javascript code redirect the viewers to the spoof site & shows a login page identical to the eBay login page.

As the redirect has occured directly from eBay, many users are likely to fall into the trap & will not realised their no longer on the eBay site. This is one of the smartest attempts by phishers so far, even entire eBay categories are being flooded with these fake listings.

Worse still, this is something that eBay Guru, Mike Enos over at Platinum Power Seller uncovered on the 12th July. Over a month later it’s disappointing that eBay have not yet patched up this hole to make it impossible for phishers to redirect via javascript. Just how long will it take eBay to act, and put the security of it’s members first.