ebaY malware alert! Google Safe Browsing Tool

10-11-2011 - Google safe browsing tool showing ebay as infected with malware. Also finally acknowledging the malicious cross-scripting exploit, which has been long uncorrected.
We also glance upon the recent report of yet another site specializing in the sale of phished hacked and/or stolen Paypal accounts

Google Safe Browsing diagnostic page for ebay.com:
http://www.google.com/safebrowsing/diagnostic?site=http://ebay.com.


US-CERT Vulnerability Note VU#808921
http://www.kb.cert.org/vuls/id/808921


More Stolen Hacked Phished Paypal accounts found for Sale
http://wp.me/p46z9-fI


More videos regarding the critical xss flaw found on ebaY:
The longevity of the flaw revealed, alomng with ebay's (non) handling of the situation
ebaY XSS Flaw Exploits: 11 Years of Hacking, Lies, Cover up & Denial
http://www.youtube.com/watch?v=Mb8UcBfvU6o

This one by ebaymotorssucks demonstrates that smartphones are susceptible:

eBay Redirect Scam Caught On Screen Video!
http://www.youtube.com/watch?v=gi-Om7kONNs

Here is a very recent live screen recording of the redirect flaw still on ebaY by youtube member thumper444
Ebay scam redirect camper van june 2011
http://www.youtube.com/watch?v=_V1knaBwG6w

Update 10-20-2011:
It's getting worse now.
Malicious software includes 74 scripting exploit(s), 3 trojan(s).
see the screencapture from 10-19-2011

http://img198.imageshack.us/img198/9141/googlesafebrowsingebayc.png

I'll update here should anything more develop:

http://78886.activeboard.com/t45611262/ebay-malware-alert-google-safe-browsin...

Category:

Education

Tags:

• ebay
• malware
• cross-scripting
• infected
• PSA
• paypal
• phished
• hacked
• accounts
• for
• sale
• commentary

[thumper444]

and its full of scammers criminals who ebay support, dont use this site.

[cappnonymous]

@thumper444

Thanks for watching & commenting.

Now it shows even more problems. A lot more.

Viewers can expand the description for links to the live page and more visual documentation

Use ebay at your own peril

[callmeshane303]

LOL - IS the SITE is infected - or is EBAY an INFECTION?

I am confused - it's all so fucked.

[cappnonymous]

@callmeshane303

It's both. One big klepto-parasite on the backside of the interwebs & RL. It's a direct conduit from the excess wealth in America's garages & attics to Wallstreet.

People should bypass ebay, send your spare money straight to Goldman Sachs, our bought & paid for branches of Gov't and the bought & paid for mainstream media, who publish their rubber stamp feelgood PR pablum, while ignoring the abuse they render upon the users.

It would be less stressful that way. LoLz

[ebaymotorssucks]

When i took a screen capture a few days ago (on my blog posting eBay shoots the messenger again), there were 74 Scripting Exploits and 3 Trojans.

Somehow i doubt those Trojans are eBay computers practicing safe hex. Probably part of more eBay XSS Redirects where eBay members are phished for their identity and conned out of their money!