I got this in my spam email box in Yahoo... but some might not even notice it's an exploit alert, so here I'm going to explain what did I do...
Finding this in my spam email box, I read the message and decided to have some little fun. I'm going to explain here in steps what does this exploit do.
1. It sends you a mail that looks like this (hilarious thing is that I'm not any eBay user, LOL!)
2. When you open it, it shows like this (sorry for the mouse cursor in the "Verify your ID" link
).
2. When you click it, it redirects you to ANOTHER non-eBay place, take a look at the
address bar at the top
3. I wanted to have some fun, so I tried to fool it placing "asd" in both fields...
4. It worked as expected, new form appeared, so I filled the fields accordingly. The credit card number isn't even a fake one, if you look at the source code of the page you'll notice it has the credit card number validator on there, I just had to experiment with it to figure out some valid number this thing could take, and it worked. I'm not allowing it to be seen here as I don't want to create problems, but to save people from a possible one.
5. Worked as expected, and tells you the info you entered was alright, then if you click "Go To Home Page" it sends you to
http://www.ebay.com
...just wanted to contribute something, and alert you people of this thing
