The latest spoof email to come 'from ebay' is regarding a transaction that you haven't paid for and you need to contact 'them' to sort it out, this one is different from the usual as it not only sends you to a cloaked redirect page that looks like ebay where you can then enter your details (as per usual) but this one also installs a data logger/key logger onto your system which obviously can give up even more important information.
Up to date security will help on this one and for anyone that uses ebay and receives anything via email the advice is to delete it, period. With the advent of my messages anything that is legitimate will be there and also any sales/payment details you need from a transaction can be obtained directly from the site.
I have the ebay email ids on my spam list now and just regularly check my accounts, sure it bins the legitimate stuff but the info is on the site and I do not run the risk of someone else in the family opening things by mistake when I am not about.
HTH,
Mike