Phishers exploit eBay

Another technique worth mentioning. This one just crossed my desk: phishers will create auctions on eBay, and then send messages to the bidders. The messages will contain links to what looks like an eBay sign-in page, but is in fact a phishing page. The idea is to lull you into a false sense of security with the fact that it's a message from a seller you are, in fact, doing business with. In effect, the phish leaches trust from eBay's good name.

What to do about it: As always, if money is involved always give every url a good looking over before you visit it. You might try contacting spoof@ebay.com, spam@ebay.com, or abuse@ebay.com.

Update: c|net has also written about the problem; see Phishers set hidden traps on eBay