eBay Posts Used In Phishing Scams
Published April 28th, 2006
Auction postings on eBay could allow attackers to steal customer information, according to a new release from the U.S. Computer Emergency Readiness Team.
The malicious coder could use scripts in product descriptions to modify pages on eBay or redirect users to another page.
These may appear to be legitimate eBay pages that request personal information. Using these techniques, an attacker may be able to collect passwords, credit card numbers or other personal information.
The government agency said that users should make sure URLs found on the site are accurate. Users can also check the certificate of a Web site to make sure it is authentic.
Related Articles