Source (and others)

Since some script-kiddies with botnet access are currently sending e-mails too it is strongly recommended not to change (and/or confirm) userdatata and password by clicking on e-mail links.

Quoting DJ Doena:

Quote:
One should never, ever click on any links that regard user names or password in eMails, unless one requested the password reminder a few minutes earlier.

Fully agree,
nevertheless it is done on a daily basis. That's why skimming-mails are that successful.

Quoting Jackiechanfan:

Quote:
Just got that e-mail today.  Correct me if I'm wrong, but doesn't any ebay e-mail use your first name? The e-mail just said "Dear ebay user". That's another thing that made me suspicious.

I got the same email ("Important - eBay Password Reset Required" ?) a few days ago. I'm pretty sure it was an authentic email from ebay however. There were no links at all to click on in the email, and the email header information appeared to originate from ebay servers. Also at the very bottom of the message it actually did list my first name and ebay user ID.

I manually changed my password last week after I first heard. Now they have notices all over the website urging users to change their passwords.