I saw this over at apug.org...
I know a lot of us are using ebay and today I have seen the worst scam yet.
When I went to ebay item 8264672764, it automatically kicked up a FALSE sign in page. You cannot stop it and it looks real.
DO NOT SIGN IN.
The subtitle of the auction description says "BUY IT NOW AT BUYEBAY@BSCMAIL.COM"
Very scary. Becareful.
I guess the tip here is to not accept any login you didn't request by attempting to access protected resources (ie, going to "my ebay" or attempting to bid). If you do get a login prompt you weren't expecting, make sure the address is
.ebay.com. This could be my.ebay.com, offer.ebay.com, and so on. I've never seen it redirect to a non-ebay.com domain, nor an IP address.
Chris