E Bay Hacked
Author
Discussion

fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all

Help!!
I have a small ebay business and it has been going well for the last few years But now I am being hacked 4 times in 4 days someone has been purchasing High end watched to the tune of 30K , I have phoned ebay to cancel purchases and report, changed passwords on all accounts associated (Email,Pay-pal Secrete Question) launched investigation with ebay.

Woke up this morning and get hacked again ?WTF apart from closing my account which i cant do. I have a fire wall on my PC I have done a Trojan scanner, Virus scanner also log on through windscribe VPN so it has to be through Ebay or my Email being Hacked ?
any ideas its getting tiresome now resetting passwords etc .

nyt

1,939 posts

180 months

Sunday 9th July 2017
quotequote all
Most likely the hacker has access to your email, so he can just request a new password.

Change your email password.

Enable 2 factor authorisation on eBay: https://nakedsecurity.sophos.com/2016/07/15/settin...

Log out of eBay when you finish so that you have to enter a password to gain access next time.


For completeness run Malwarebytes on your PC: https://www.malwarebytes.com


ETA: If the hacker does have access to your email then other stuff is at risk too. Any bank accounts/paypal etc that allow password change via email.

fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all
nyt said:
Most likely the hacker has access to your email, so he can just request a new password.

Change your email password.

Enable 2 factor authorisation on eBay: https://nakedsecurity.sophos.com/2016/07/15/settin...

Log out of eBay when you finish so that you have to enter a password to gain access next time.


For completeness run Malwarebytes on your PC: https://www.malwarebytes.com


ETA: If the hacker does have access to your email then other stuff is at risk too. Any bank accounts/paypal etc that allow password change via email.
Thank you I have changed passwords twice on email and still happens I will do it again now thanks

egroeg

41 posts

138 months

Sunday 9th July 2017
quotequote all
Try changing them using your phone

fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all
nyt said:
Most likely the hacker has access to your email, so he can just request a new password.

Change your email password.

Enable 2 factor authorisation on eBay: https://nakedsecurity.sophos.com/2016/07/15/settin...

Log out of eBay when you finish so that you have to enter a password to gain access next time.


For completeness run Malwarebytes on your PC: https://www.malwarebytes.com


ETA: If the hacker does have access to your email then other stuff is at risk too. Any bank accounts/paypal etc that allow password change via email.
I managed to enable 2 factor on Papal very easy but Ebay doesn't seem to have it but hey ho at least I am half secure thanks

nyt

1,939 posts

180 months

Sunday 9th July 2017
quotequote all
egroeg said:
Try changing them using your phone
It could be your phone that has been compromised.



jammy-git

29,778 posts

242 months

Sunday 9th July 2017
quotequote all
Remove any eBay apps on mobile/tablet devices. Set up a new email account and change eBay to use it.

anonymous-user

84 months

Sunday 9th July 2017
quotequote all
don't you mean papal has been comprised, when you say they bought off ebay do you mean they won an auction?

do you you use the same password elsewhere, don't answer but that is the usual way, they brake an easier target. if not think about how you acess ebay, what computers you use. i would wipe them and start again. change ever password you have with an random 12 symbol words and write them down and store offline (ie not on computer).

how long ago did you last change password and how old the account?


bitchstewie

68,146 posts

240 months

Sunday 9th July 2017
quotequote all
Are you using strong unique passwords for all of your accounts?

Are you using two-factor authentication wherever you can and especially on your email?

fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all
The Spruce goose said:
don't you mean papal has been comprised, when you say they bought off ebay do you mean they won an auction?

do you you use the same password elsewhere, don't answer but that is the usual way, they brake an easier target. if not think about how you acess ebay, what computers you use. i would wipe them and start again. change ever password you have with an random 12 symbol words and write them down and store offline (ie not on computer).

how long ago did you last change password and how old the account?
Hi no thankfully the sale didn't complete i just have you won this auction now or you have bought this item pay now.
I use Two-Factor Authentication for Paypal but ebay doesn't offer this I have changed passwords many times for ebay paypal and email but I am in the process of changing my email address in ebay but this seems to be a problem as i am not getting confirmation code sent i have tried this with 3 different email addresses still no conformation Its getting a bit of a problem as I am wasting time changing passwords etc and ebay seem to be clueless ?

Edited by fishseller on Sunday 9th July 18:59

MockingJay

1,314 posts

159 months

Sunday 9th July 2017
quotequote all
fishseller said:
Thank you I have changed passwords twice on email and still happens I will do it again now thanks
Have you checked your PC for keyloggers etc?

anonymous-user

84 months

Sunday 9th July 2017
quotequote all
very odd, what do they gain from this i wonder? my ebay was taken over by someone years ago, police involved but that was selling, no sure on buying unless they hoped your paypal was linked.

my thoughts would be password compromised, possible wifi or you used it elsewhere. i would ring ebay instead of pissing around.


fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all
MockingJay said:
fishseller said:
Thank you I have changed passwords twice on email and still happens I will do it again now thanks
Have you checked your PC for keyloggers etc?
No done a thorough scan no loggers or Malware etc i am convinced its an insider

fishseller

Original Poster:

359 posts

124 months

Sunday 9th July 2017
quotequote all
MockingJay said:
fishseller said:
Thank you I have changed passwords twice on email and still happens I will do it again now thanks
Have you checked your PC for keyloggers etc?
Phoned Ebay 5 times about this and they just come out with the obvious "change password etc etc " i only log on via my home laptop behind firewall and VPN so its ebays end or my email provider being hacked very frustrating as I am pretty savvy maybe inside job, the problem is the hacker is not gaining anything i think its just a game to them but time consuming for me

ReaderScars

6,087 posts

206 months

Monday 10th July 2017
quotequote all
Would it not make sense to get access to a completely different device, outside of work and home, set up a new email account which has got encryption, then log in to eBay on this different device and change the email address to the new encrypted one?

Maybe it's not just your work/home computers/mobiles/tablets which are compromised, could also be your router.

ReaderScars

6,087 posts

206 months

Monday 10th July 2017
quotequote all
Is the VPN trusted or a small indy? What about your ISP? Have you changed router passwords as well?

Incidentally at some point you might want to consider involving the police as it seems several laws are being broken - Computer Misuse Act and harassment, if it's being done to cause annoyance or alarm.

They might have a solid workaround to disable the criminal's strategy.

Edited by ReaderScars on Monday 10th July 15:51

bitchstewie

68,146 posts

240 months

Monday 10th July 2017
quotequote all
Also use Gmail which you may already be using, if you're using some ISP email account they're not good security.

fishseller

Original Poster:

359 posts

124 months

Tuesday 11th July 2017
quotequote all
Thanks all !!
seems the hacker has gone somewhere else,They tried to purchase £70k worth of watches they managed to buy to small items for £20 (got refunded),so probably thought go for the big ticket items, but who would have that amount of money sitting in a pay-pal or a everyday bank account . But nevertheless what worries me is how they were 1 step a head I changed passwords and email accounts 3 times and they still got in ? I think E bay has tracked the IP address range and banned it ? but sofar they have stopped beware !!

fishseller

Original Poster:

359 posts

124 months

Tuesday 11th July 2017
quotequote all
ReaderScars said:
Is the VPN trusted or a small indy? What about your ISP? Have you changed router passwords as well?

Incidentally at some point you might want to consider involving the police as it seems several laws are being broken - Computer Misuse Act and harassment, if it's being done to cause annoyance or alarm.

They might have a solid workaround to disable the criminal's strategy.

Edited by ReaderScars on Monday 10th July 15:51
I use Windscribe

https://windscribe.com/?friend=eabtv3o1

seems very good

anonymous-user

84 months

Tuesday 11th July 2017
quotequote all
i would say you computer is infected or the vpn, but seems the vpn is legit, but are you using there actual software. changing password 3 times means they have access somewhere.