You’re selling an item, someone pops up to ask “is this still available”? or a variant of. You reply in the affirmative.
Next message from them: is the item the same as this item here? followed by a hyperlink, often an unusual search engine.
And this then installs a browser hijack on unwary machines.
