Heres how it works: an attacker sets up a store page with listings for products.

By clicking the download button, the user will unintentionally download the code and put their rig at risk.

The main threat is spreading malware and stealing private information.

eBay knows about the vulnerability that allows malware distribution but does not want to fix it

eBay has said that its been in contact with Check Point following their discovery.

We have not found any fraudulent activity stemming from this incident.

spot_img

source: www.techworm.net