Hackers Target eBay Users With Fake iPhone Listings
The BBC reports that several listings for iPhones for sale on eBay contained JavaScript code that changes the way the site acts. When users clicked on the listings, the code forced their web browser to redirect to a fake version of eBay that asked for their email address and password.
It's claimed that eBay only removed the hacked listings after the BBC contacted the company, and that customers had been vulnerable for at least 12 hours.
Speaking to the BBC, IT worker Paul Kerr explained that eBay hadn't removed the compromised listings:
When I spoke to the lassie on the phone, she said: 'I'm going to report that to the highest level of security to get it looked into.' And she did emphasise that. They should have nailed that straight away, and they didn't.
A video was created to show eBay exactly how the hack worked:
In a statement to the BBC, eBay assured customers that they were unlikely to have been affected by the hack, remarking "This report relates only to a 'single item listing' on eBay.co.uk whereby the user has included a link which redirects users away from the listing page. We take the safety of our marketplace very seriously and are removing the listing as it is in violation of our policy on third-party links."
Yesterday Amazon was revealed to be vulnerable to the same kind of attack after a security researcher uncovered a vulnerability that left Kindle libraries vulnerable. Hackers were able to include JavaScript in the metadata of eBooks that could trigger pop-up windows and page redirects. That exploit has since been fixed.
- Love in the time of elections: Do politics spice up or spoil dating in India?
- Samsung Galaxy S24 Plus review – the best smartphone in the S24 lineup
- Household savings dip over Rs 9 lakh cr in 3 years to Rs 14.16 lakh cr in 2022-23
- Misleading ads: SC says public figures must act with responsibility while endorsing products
- Here’s what falling inside a black hole would look like, according to a NASA supercomputer simulation