From the article posted above:
Quote:
An internet security expert said he doubts this round of scams is the result of eBay being hacked. The most likely scenario, according to McAfee Online Security Expert Robert Siciliano is that the scammer is also a seller and, therefore, can see bidders IDs and has matched those IDs to email addresses.
|
McAfee Online Security Expert Robert Siciliano does not give a plausible scenario. Even if you are a seller, you can't see bidder's IDs of auctions you do not run yourself. Also, how would a seller possibly match the ID with an email address? It is much more likely that eBay has an insider lifting this information and supplying it to the scammers as a team.
Of course, if eBay does find out they have a mole, it will definitely not be made public, so we will likely never find out how this is happening.