@jacklick,
@RUSTINGEEZER, their goal is to get $$$
1) Hacker scrapes hundreds \ thousands of real ebay ads, along with pictures, and puts them in a database
2) Hacker ads his own text\image to the ad, it looks like this
The 'Buy It Now' price will be a percentage of the ask price from the original ad, like 50%. The payment link changes every week.
3) On the illegal market, the hacker buys compromised \ dormant ebay accounts. The better the feedback, the more that account costs.
4) When ready, they access the hacked account and use a loader to list hundreds or thousands of scam ads, all with the 'buy it now' text and an ebay 'price' of $1. If you look at the seller account and sort for 'new' postings suddenly there will be hundreds\thousands with the same start time. Often they'll post the same ads to two or even three hacked ebay accounts at the same time.
5) When you go to their link a live person will send you payment instructions for the 'buy it now' price in the colored text and walk you through payment. The goal is to get money transferred to them outside of ebay, they ignore any bids people make on the auction.