The whole setup -- sellers of one-cent items automating their end of the deal, criminals automating purchasing those penny items to create a history and receive legitimate-looking feedback -- is a good example of a cyber symbiotic relationship.
"It's win-win for both sides," said Lovet. "There are one-cent auctions that exist on one side, and crooks wanting to build positive feedback on the other.
"Two bots are talking to each other at some point," said Lovet, who noted that it would be funny if it wasn't being used to scam innocent eBay users.
Lovet said he had not uncovered any evidence that the two sides of the arrangement were being operated by the same people. "Both sides are only using each other," he said.
He recommended that buyers check any eBay seller's profile carefully, and if there are numerous one-cent purchases in the account's feedback, steer clear. "That's a strong sense that something's wrong," said Lovet.
Lovet has posted his eBay scam research on the Fortinet Web site.