ebay account compromised

[ssampier]

Over the last weekend my ebay account was compromised. I'm not sure how they got my password; I never read those phishing scam emails. Actually I haven't visited ebay in almost a year prior.

As far as I can tell, the person merely send lots of fake notices from my account asking about various items.

I have already re-instated my account with ebay and changed my password to something even more secure. Has this happened to anyone else?

 

[dpmcalister]

Yes, it happened to me late last year. The hacker also compromised my Gmail account - which they used to get hold of my eBay account!. Basically, they went to eBay and asked for an e-mail address reminder. Got that and then hacked my Gmail account. From there it was easy for them to get a new password for my eBay account and start off.

Thankfully, like you, they only sent out notices asking about various items (all of which appeared to be PS3-related). I got the eBay account back in less than 24 hours. Gmail never gave me my account back even though I could prove it was mine with IP addresses and what-not

I thought my passwords were pretty secure, but obviously not. Now though? Let's just say that the one I use for EN World is an indication of my "paranoia" and is 27 characters long comprising everything security consultants recommend

 

[ssampier]

That's pretty paranoid. My main password is 8 characters with letters and numbers. Needless to say, I increased that security considerably with this hack (adding more characters and including special characters).

What do the hackers gain by sending fake notices from your account? I don't quite understand what they were after.

 

[Wystan]

Usually they want you to reply so that they can get your E-bay information confirmed and then get you to go to a Paypal phishing site to get your Paypal information as well... Or any of a number of other phishing sites.

 

[Dimwhit]

I had my ebay account hacked once. Someone posted a couple dozes items (TV show seasons on DVD) for auction. It was weird...they obviously couldn't be selling them for real, because it was my account. Maybe they didn't like me and thought they'd sabotage my account or something?

Anyway, eBay customer service took care of it pretty quickly. Only time I ever had to contact them (used their live chat). Strange stuff, though.