Someone hacking into your ebay and selling 35 items for $300-$1000 each

[DiamondDash2k]

OH YEAH, it happened alright.. woke up this morning to check my yahoo email... doesnt work.. im like wtf.. i tried it last night... worked fine.. tried my ebay... password dont work!.. im like alrite this is stupid. So im like this is fucked maybe it's my computer.. i go back to it 4 hours later.. i go onto ebay and do a search on my name... i find it and it says im selling items.. i check the items... LOT OF 50 IPOD MINIS, 8.2 MEGA PIXEL CAMERA, LAPTOPS.. im like wtf! and like lots of people are bidding on them and they're all on one day auctions. What a gong show. And the guy has the nerve to use my perfect feedback as a selling point for his items, bastard. If anyone knows how to destroy someone else's computer and only need ip, tell me, i have his ip.

In the end i got it resolved.. thank fully.. some guy from ebay live helped me out and deleted all the auctions, changed my password, etc. But my stupid yahoo still doesn't work. Basement.

[Technix]

Yea I posted about that in the other ebay thread...I've had mine hacked before but it probably happened because you used a simple word as a password. The person who hacked me was selling mostly laptops for $1000 each.

The ebay security rep told me I should use a combination of letters and numbers that only I would remember.

[FlorpIncarnate]

I studied this formally in cryptography and I have personally run distributed brute-force password attacks... and the one thing I have learned is that the worst thing you can do is use an english word as a password.

Use lower and uppercase. Use numbers and non-letter characters. Use less common letters, and avoid vowels.

Also consider that every character you add to your password increases the time needed to guess it exponentially. Don't use short passwords.

Never use the same password for more than one site. If a site is compromised by a cracker and the password lists are retrieved, the cracker's next dictionary attack on a different site is likely to contain your old compromised login/pass.

I mean come on, we're just talking about a ctrl+c ctrl+v copypaste operation here. Just have a textfile somewhere, you don't need to remember stuff.

[e_BoY]

.....

[DiamondDash2k]

the thing was though, that i never used a common password.. it has no way a connection to me. They said it was because i clicked on some link that was not from ebay.. it says my account was suspended but then it really wasnt cuz i clicked on the link and it had nothing to do with it.

[decypher]

^ well then it's your fault for clicking dumb links heh

[neoh]

Originally Posted by FlorpIncarnate

I studied this formally in cryptography and I have personally run distributed brute-force password attacks... and the one thing I have learned is that the worst thing you can do is use an english word as a password.

you make jesus cry.

use a ! in the password and your set.

And I would give the IP to the proper authorities, as those are items bought online with stolen credit cards and laundered.

[e_BoY]

.....

[t-skywalker]

it just happend to me with all my passwords too..i had to reformat my computer!! it sucks i have all these accounts and i cant access them honestly i find it creepy....

[MissBehavior]

Originally Posted by DiamondDash2k

the thing was though, that i never used a common password.. it has no way a connection to me. They said it was because i clicked on some link that was not from ebay.. it says my account was suspended but then it really wasnt cuz i clicked on the link and it had nothing to do with it.

e_BoY can correct me if I'm wrong on the eBay end, but to my knowledge any emails sent to you LEGITIMATELY by eBay will use your eBay user ID as the salutation (ie: Dear emokid6969). Anything LEGITIMATELY from PayPal will use your first and last name (or business name if you have a business account, ie: Dear John Doe).

Anything that says "Dear eBay/PayPal member/user" or has no salutation that's threatening to freeze your account/notifying you of a weird purchase you didn't make/asking you to update your information IS NOT COMING FROM EBAY/PAYPAL. If you get emails like that, DO NOT CLICK ON THE LINKS. Go to your eBay/PayPal account from another browser window and log in to your account. eBay has "alerts" in My eBay, and PayPal will tell you that there are issues that need to be resolved on your account and to visit the resolution center.

Also, it really helps the companies shut the sites down if you fwd the emails to spoof@ebay.com and spoof@paypal.com

Sorry for the rant, I just deal with this stuff every day and if I can inform one person and avoid having to say "Gee, I'm sorry. That email's a fake and you just set yourself up for identity theft" just once, it's worth it.

I know most of you are smart enough to know this, but yeah.

[FeelGood]

Originally Posted by t-skywalker

it just happend to me with all my passwords too..i had to reformat my computer!! it sucks i have all these accounts and i cant access them honestly i find it creepy....

reformatting your computer was a waste of your time.

if someone steals your password or cracks it, then wiping your hard-drive wont do anything.

[e_BoY]

.....

[MissBehavior]

Originally Posted by e_BoY

Cant confirm about ebay using ur user id or paypal using ur first name thing. But the thing u mention about emails stating ur account will be suspended and all that fishy crap are the usual spoofs u see. Also there are ones where they ask you to update your account information and anyone with atleast half a brain should know these are spoofs and should know that companies will nto email u asking u to re confirm your CC number/ bank information etc.. I would like to shed more info on this account take over thing but i dont work in that department and my knowledge is pretty much the same as you all. Basiclly use common sense. Most people who have been using the internet alot and have common knowledge should be able to tell between a spoof and one thast not.

I work in PayPal, so I know what our emails out say...I just wasn't sure how the eBay out-emails would address customers.

[Kandyapple]

Yah I got one of those e-mails a while back. I was confused because I had never used e-bay at all. I don't think I ever finished setting up my account fully. I don't remember clicking the link. ( I hope I didn't) I think I just blew it off because I never use it.

[FeelGood]

Dear Ebay Member.

right there gives that one away, wouldnt they address their email to you personally with something like 'Dear Andrew' or something?

Other then that, the email looks and sounds fishy anyways.

Forcing you to click the link and telling you your account may be suspended for 24 hours, bullshit.

[e_BoY]

.....

[Miss T]

I just got this email. Don't know what to do about it.


From : PayPal.Inc@ <service@paypal.com>
Sent : March 4, 2006 3:30:23 PM
Subject : Receipt for Your Payment to goodhemp

You have added laptopseller@yahoo.com as a new email address for your
PayPal account.

If you did not authorize this change or if you need assistance with
your account, please contact PayPal customer service at:

https://www.paypal.com/row/wf/f=ap_email



Thank you for using PayPal!
The PayPal Team


Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.

----------------------------------------------------------------
PROTECT YOUR PASSWORD

NEVER give your password to anyone and ONLY log in at
https://www. paypal. com/ Protect yourself against fraudulent websites
by opening a new web browser (e.g. Internet Explorer or Netscape) and typing
in the PayPal URL every time you log in to your account.

----------------------------------------------------------------


PayPal Email ID PP007

[Miss T]

Nevermind, got this figured out. :)