LOL! Ordered some RAM for an older laptop on eBay. It arrived today, works as intended, A+.

Seller included a USB flash drive. It's a funky looking purple translucent one that appears to also work as a little LED flashlight, although the battery for that is dead.

Taking proper precautions, I plug it into my Kali laptop. 1 GB USB 2.0. LOL.

Oh look, two hidden files.

autorun.inf - set to auto-launch an .exe.

What is that .exe?

https://www.virustotal.com/gui/file/ccbee92ada245400481cccd604a39bd1babe56c4c9019b6d5b9bd4eb68266eec

Because of course the bonus drive tries to run a virus.

Do I complain to eBay? I feel like I should.

VirusTotal

VirusTotal

@charonpdx I would say yes, getting the seller banned will at least slow them down from infecting other customers.

@epimetheon Apparently there is no way to complain to eBay about this. Only if the actual item in the order has a problem. In which case I have to attempt to return the item to the seller first.

I'll just leave negative feedback and hope that helps.