An e-mail directing someone to a website called ebaychristmas.net was reported to eBay as potentially fraudulent. The website requested users to enter their eBay user names and passwords, as well as information about e-mail accounts.

The investigations team for eBay reported back that the email was an official email from eBay. The recipient of the original e-mail contacted the investigations team again, telling them that the website was clearly fraudulent.

Days later, an eBay representative confirmed that the e-mail was in fact fraudulent. It appears that eBay was actually working on shutting down the phishing site noted in the email. The scam is using multiple servers, and when one is shut down, a new one takes its place.

Full story here.