eBay account compromised

today i received a barrage of email from ebay, all confirming my listings. horrified, i logged into ebay, half expecting to get the error "your sign in info is invalid".

i managed to log in, immediately changed my password and all others connected to it. i checked the activity. that bastard listed 45 new items, and ebay charged a total of $652.20. 8 of those items were featured on the home page.

now awaiting report from ebay.

 

How could they have gotten a-hold of your password? This raises a concern for me because I have an ebay account, although I don't sell.

 

I need to check my forgotten ebay username to see how things are going there. Would't think it could cost you that much if an intruder got into your account.
Any idea how the bastard managed to get in?

 

Maybe keylogger on your computer. Run scan check for it and viruses. I would also check bank account. I am sure you have either bank account or credit card listed on ebay.

 

Perhaps you replied to one of those phishing emails.

ADEEL CHOWDHRY

 

below:

that's the only reason i can think of. the only place i can think of is the library. no one has ever accessed my laptop, and my laptop is like Fort Knox. goodness, if it really was the library i can sue the university for a lot of money!

i'm trying to check to see which PC has a keylogger (nearly 50 of them and i can't remember which one i used). no result so far.

what baffles me is why the person who accessed my account:

1) didn't use it to buy high ticket items.
2) didn't immediately change the password, screwing me over twice.

not that i am hoping they did, but....

i run an internet safety and online security workshop in school.

 

Crooks regularly hijack ebay accounts. It is not to buy expensive stuff bc hijacking your account does not really give them any buying power BUT rather they want your feedback. They can dupe buyers into buying from them (you) bc you have positive feedback, then they take the person's money and basically rip them off.

As for not changing your password, the crook was incredibly stupid or he figured if he left it the same, it would bring less attention to him. If you can log in, maybe you won't notice.

Who knows, though, only crooks know why they did.

PS - I hope ebay works it out for you - this is every seller's nightmare.

 

well ebay limited my account (can't bid or sell) though they reversed the charges because they decided that "the items were listed by a third party without your authorization".

 

you got phished, it happened to me when I was a newb on the net...luckily they didnt post anything or even log into the accout, and ebay just flagged it

 

see last line of post #6.

 

Perhaps he did not get the message, devin

 

Maybe it was someone who knew you?

Well - I've always heard horror stories from the lecturer in my securities class about people who leave the room for a break and forget to lock their computer - and thus someone else sits down and messes about with anything. Also horror stories about Library Computers keeping you logged into a site though cookies.

 

It seems it is high time for me to check my account. I haven't logged in to it for at lease 6 months. Hope I remember my password.
I cann't understand, how this could have happened.
I know that you "run an internet safety and online security workshop" , but you might check if you have some hidden softwares/key loggers installed in your PC.
Also keep a password at least 10 characters long and with Letter number and Special character combination...

 

That kind of happend to me yesterday, but the guy didn't sell. He bid on a car for £700/$1400. Luckily I was outbid. But what I did was contact eBay about what happend they checked the IP of the user that bid, obviously it was different to mine, and they contacted that guy on his proper account. I would email eBay and ask them to do the same.