Legit unfortunately.
Some folks have broken out the hex editors and are hacking at the bid and buy it now buttons apparently allowing them to buy out items at the initial listing price, not the buy out price.
Options:
1) Wait until this is patched.
2) Set a comfortable starting bid to protect yourself.
Enjoy!