ebaY Hacked! Redirect Exploit and Fake Page Response/Follow-up

Video showing more details of the latest malicious redirect flaw found on ebaY.
Cappnonymous gives live visual demonstration on both active listing and also after the listing was pulled by ebay and points out curiosities of the flaw.

Take note that disabling active scripting and/or plugins will NOT protect you from this!

Note that NO swf object was found, and that javascript was not enabled. Adobe flash was not enabled.

Again, thius does NOT appear to be the same exploit as noted in US-CERT Cyber Security Alert SA06-117A
http://www.us-cert.gov/cas/alerts/SA06-117A.html
or at Vulnerability Note VU#808921
http://www.kb.cert.org/vuls/id/808921

This appears to be something new or a new variation thus far unseen or undocumented

This is scary stuff folks!
Avoid ebaY like the plague!

Music used here is Public Domain, from the internet archives classic horror movie;
"The Brain That Wouldn't Die"
from the collection: blip.tv

http://www.archive.org/details/PhantasmagoriaTheater-TheBrainThatWouldntDie132

Category:

Education

Tags:

• ebaY
• Redirect
• Exploit
• Fake
• cross scripting
• xss
• CSRF Vulnerability
• ID theft
• phake
• NoScript
• Adblock Plus
• hacked
• hack
• hacking
• compromised
• security
• critical safety flaw
• scam
• fraud
• scammer
• hacker
• ripoff
• 2010

[cappnonymous]

AGAIN! lmao!

You can see this one is absolutely not the same as many others we've seen.

No defense against this as far as I can tell, other than avoiding ebaY!

People using ebaY are supporting crime on many levels, so that alone should be reason enough. If not, people should consider how they destroyed X amount of American families/businesses, etc all while catering to sellers of fakes, stolen goods, ripoffs of all types.

Using ebaY sends the message that u support & condone organized crime.

[ebaymotorssucks]

Wholly Shiz!

The Scammers Have Hacked eBay Again! LOL!