Oh, no kidding, and no, the name was not familiar. You are correct, if it could have the sophistication of some of the worms I've seen, they'd make millions in days. I am well aware of how to detect a spoof, but some of my users are not. At least I have them all trained that if they are even the slightest bit unsure about an email, send it to me. I'll check it out.

It's just that this particular one basically ripped off EXACTLY Paypal's site and even included links to paypals images directly on paypal's servers. Only one line in the entire html makes it a non-official paypal document. What scares me is what if I was a regular paypal user, and just clicked this one because I know I had 5 auctions ending that day. Odds are high I wouldn't even be the slightest suspicious.