According to online sources, the website eBay.com uses a special script to scan the ports of visitors' PCs to detect remote access programs. Many of the scanned network ports are used by popular remote management tools such as Windows Remote Desktop, VNC, TeamViewer, and others.
Enthusiasts from Bleeping Computer conducted a study confirming that eBay.com indeed scans 14 different ports when a user visits the online marketplace. This process is carried out using the check.js script, which is triggered each time the resource is accessed. The script scans using WebSocket to connect to 127.0.0.1 through the specified port.
The source notes that port scanning does not occur if the user accesses the eBay site from a device running Linux. However, when visiting the web platform from a device operating on Windows, scanning is recorded. It is presumed that this scanning is done to identify compromised computers that may be used by malicious actors for fraudulent activities on the eBay platform.
It should be recalled that in 2016, reports emerged online stating that hackers were using TeamViewer to take control of users' PCs to make fraudulent purchases on eBay. Since many eBay users use cookies for automatic login, attackers could remotely control their computers and access the platform for shopping. Official representatives of eBay have refrained from commenting on this matter.
Source: 3dnews.ru
