Heres how it works: an attacker sets up a store page with listings for products.
By clicking the download button, the user will unintentionally download the code and put their rig at risk.
The main threat is spreading malware and stealing private information.
eBay has said that its been in contact with Check Point following their discovery.
We have not found any fraudulent activity stemming from this incident.
source: www.techworm.net