Source: http://www.hackbusters.com/news/stories/342461-phishing-gone-ebay-patches-to-block-session-jacking-magento-holes