INFO:

Security firm Check Point Software has discovered an eBay vulnerability that gives attackers a way to use the website to phish unsuspecting users or to infect their devices. So long as attackers use a programming technique known as JSFUCK, they can bypass a key restriction that prevents people from embedding JavaScript codes into auction pages. Those codes will run when the page is opened on either a mobile or a desktop browser. In the video below, for instance, someone sent an eBay link to a mobile user, who was then prompted to install a malware masquerading as a "discount app" upon viewing the item's details.