Re: eBay account compromised, anyone else?
- From: softailguy@xxxxxxxxx
- Date: 17 May 2007 11:46:24 -0700
On May 16, 9:10 pm, Sapphyre <sapphyre...@xxxxxxxxx> wrote:
Tonight I logged into my mailbox to find out that my eBay account has
been compromised. At first I figured it was another spoof mail, I
mean, I get 2 per day, and most of them are sent to email addresses I
don't even use for eBay...
I looked it through, email address, check, real name, check, eBay ID,
check. Okay, this looks real. I moused over the links, check. Next
step: go tohttp://www.ebay.comand see what happens when I log in.
Guess what? Password did not work. Although I managed to restore
password, change it, change secret question, change email password,
and everything else their email recommended (including having all my
credit cards reissued as a precaution).
Well, I hardly ever use eBay these days, last transaction was in
April, I bought some stuff from a friend of mine who lives locally
(and sells on eBay and tells me what he's got, in case I want to buy,
I just go and BIN the stuff and he brings it to my house for cash).
Not a major sale, but the only one I've done in a long time. I left
him feedback on May 8.
So my question then becomes, how the heck did my account get
compromised? Seeing as how I don't use it, and I delete all these
spoof mails without reaction. Well, eBay claims they cancelled any
bids/listings, and restored my email address (which they suggested was
tampered with so I wouldn't know listings had been placed). I don't
see any evidence of activity except that I couldn't log in with my
password. I don't think I'm dumb enough to forget my own password
since I just used it a week ago, but you never know...
So I'm trying to figure out what happened, and how it happened. I need
to know if there's a security breach somewhere (like at work, where I
left the feedback, I'd have had to log in). If so, why did it take 8
days for me to be notified, how does that all work? No activity has
happened on either my bank account or credit card, how paranoid am I
to cancel all that stuff? Is eBay and PayPal secure enough that I
should be worried of someone getting the number? Or have they
smartened up enough to block most of the number when we go into our
various accounts screens?
Help would be appreciated, since eBay does not seem to have any kind
of customer service to answer these questions, or a phone number of a
human I can talk to, to even find out what happened. Knowing where the
security breach might have happened would be key, but maybe someone
can give me enough information to tell me how my account can be
hijacked when I haven't done anything stupid like punch in my password
on a non-eBay screen. (I always go towww.ebay.com, I never click
email links).
Thanks in advance,
S.
A free product called SpoofStick, which is available for both IE and
Firefox,
will help to expose phishing attempts.
Here is a link => http://www.spoofstick.com
fwiw,
Doug
.
- Follow-Ups:
- Re: eBay account compromised, anyone else?
- From: Sapphyre
- Re: eBay account compromised, anyone else?
- From: Jim Seymour
- Re: eBay account compromised, anyone else?
- References:
- eBay account compromised, anyone else?
- From: Sapphyre
- eBay account compromised, anyone else?
- Prev by Date: Re: Coins from the Bank
- Next by Date: Re: eBay account compromised, anyone else?
- Previous by thread: Re: eBay account compromised, anyone else?
- Next by thread: Re: eBay account compromised, anyone else?
- Index(es):
Relevant Pages
|