Can someone explain how an ebay account is hijacked?
pf70collector
Posts: 6,840 ✭✭✭
I just received an email from an ebayer in my "ask seller a question" He pointed out to me to paste a site because he saw a similar item that I was selling. This site was flagged by internet explorer as a known phising website. I got the warning not to precede to the website. Has this ever happened to any of you ebay sellers? I just wonder if I preceded to that phising website if they could automatically infiltrate my computer. The ebayer who sent me the email has about 12 feedback all positive. The item I am selling is now bid up to multi-thousands of dollars.
0
Comments
If the phishers have figured out how to scam via My eBay, life gets a little more complicated.
Cher-Wood Forest Aviary
POTD - May 26, 2005
morgans
Good info.
Box of 20
Seems these clowns can now redirect you by using the "ask a seller a question" feature. That way it shows up in "My Messages" like it's legit. It's not and I wouldn't try doing the copy and paste. I am sure it's totally bogus!!
Larry
Dabigkahuna
Box of 20
<< <i>I never entered the phising site, but if I did I was just wondering if they could get access to my computer. Should I report this ebayer who sent the message to ebay? >>
That depends on what browser you're using and how tightly bolted down you have the security. If they have an activeX script running that does an automatic install of something, they could.
Box of 20
<< <i>How is an ebay account hijacked? >>
Typically, an email looking like it is from eBay is mass sent out to thousands of email addresses. The email directs the recipient to click on a link and log in to ebay. The email will be something looking like a question from another eBayer, an "official" request to update account information, a link to information, or some other excuse. The point is, the email will try to get someone to click a link to go to "ebay" (or to "paypal")
The site the link sends the person to looks just like ebay, but it's not. Once the person tries to log in using their ebay name and password, the information is recorded and the scammers use that to log in to ebay, change the password, and go to town. They may change the address to which paypal payments are sent, or just take cash check or money order. They put up auctions, all bogus, on the hijacked account, and wait for the money to start rolling in.
Box of 20
FloridaBill
Clicking on the link almost certainly caused no problem. I click on them all the time and my spyware/virus software never finds anything there. What they wanted you to do is to log into their fake site. Logging in would give them your id and password. That's the hijack. If you're at all worried change your password.
I got one of these tonight. I contacted the ebay ID that it supposedly came from and made him aware. he thanked me. I forwarded the e-mail to spoof@ebay.com with a note that I had made the 3rd party aware of the scam.
-Jerry
I got something like that, last month, and it was in the ebay system as well.
I posted about it when it happened.
I've been told I tolerate fools poorly...that may explain things if I have a problem with you. Current ebay items - Nothing at the moment
Box of 20
I knew it would happen.
I never open emails nor access links that I am not absolutely positive of what they are or who they are from. I run all the latest norton firewall/anti-virus software, so I think I'm protected pretty well....evidently not.
I contacted ebay live help via my wife's ebay account and, surprise to me, they responded almost immediately.
Ebay deleted all the bogus auctions and suspended my account. They told me, via e-mail, how to re-instate the account and reset the password. It all worked fne.
I have no clue how my logon/password got hijacked. Just have to be cautious than ever I guess
Plenty of better places to buy coins.