Your item has sold! Avoiding scams targeting online sellers
Summary: Cisco Talos documented scams targeting sellers on online marketplaces including eBay, Facebook Marketplace, and Reverb, citing a /r/guitarpedals user who received a fake Reverb direct message claiming their item had sold and prompting account verification. The message used percent encoding to mask a link that redirected through Reverb's own redirection functionality to an attacker-controlled server, which then collected credit card details and account balances.
What you should know: A seller account holds past sale proceeds and receives lump sums when future items sell, so a single harvested card or balance figure gives an attacker a target worth emptying now or waiting on until the next high-value listing closes.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026