Heads up that eBay was hacked.

Russ · September 25, 2007 1:59AM

WARNING!!!!!!!!

Unbelievable that ebay hasn't shut that down. Anyone who is registered on ebay better go over there and look for their user name as all ebay info and credit card information is being posted for each ID I've seen. Live world had been hacked and this ain't no joke. There are way over 25 pages of user information. I stopped at 25, there's more and it's still going.

I CAN'T BELIEVE EBAY HASN'T SHUT THE TRUST & SAFETY BOARD DOWN!

http://forums.ebay.com/db1/thread.jspa?threadID=1000565438&start=0

Russ, NCNE

DUIGUY · September 25, 2007 2:08AM

Say it ain't so !!

MadMarty · September 25, 2007 2:10AM

Did you see the list of the names?

Hugegut · September 25, 2007 2:10AM

I can't view the T&S board. Looks like they shut it down.

jmski52 · September 25, 2007 2:10AM

How do you check to see what's being broadcast?

MORGANHUNTER2 · September 25, 2007 2:11AM

Looks like the board has been shut down- won't let me in.

jmski52 · September 25, 2007 2:17AM

What is live world and how do you know if it's still showing the credit card information?

Russ · September 25, 2007 2:18AM

<< Did you see the list of the names? >>

Nope. They already had the T&S board shut down by the time I saw the thread.

Russ, NCNE

mcmxi · September 25, 2007 2:22AM

It may be nothing but i got a question this morning asking if i would ship to a different address than theirs. I told them no because I didn't want to ship to a hijacked account. They had 0 feedback.

Coxe · September 25, 2007 2:26AM

news link

Wonder if it might be related to our rosstravis.com thing the other day. Some retribution?

ttown · September 25, 2007 2:30AM

I had someone try to hit my AMEX card this weekend and American Express rejected it since. It was for a couple i-phones, they were on the ball since they weren't going to my address and have since issued me a new card.

If PayPal shows my bank account it's not going to be so easy!

Russ · September 25, 2007 2:31AM

<< Wonder if it might be related to our rosstravis.com thing the other day. Some retribution? >>

What's the rosstravis.com thing?

Russ, NCNE

BlindedByEgo · September 25, 2007 2:32AM

I just reset my password. My CC on Ebay expired in '03, but my checking account info is current. I'll be watching that one closely.

TwoKopeiki · September 25, 2007 2:37AM

What is more likely is that someone posted information obtained by "phishing". Some of the fields posted were "ID verified" and timestamp, which look to be created by additional program verifying phished information against eBay log-in pages.

Just my 2 cents.

Russ · September 25, 2007 2:45AM

<< What is more likely is that someone posted information obtained by "phishing". >>

That was one of the possible scenarios, that has now proven not to be the case. Several eBay and PayPal reps have admitted that the eBay database was compromised. Of course, several others are claiming it's all just a big hoax.

Russ, NCNE

kimon1230 · September 25, 2007 2:45AM

anyone have a list of the ebay userids listed?

jpo1965 · September 25, 2007 2:46AM

was just there went to small cents first listing showed pic of girl ummm posed doggie and seller was offering to sell pics!! unbeliveable

MacCrimmon · September 25, 2007 2:51AM

<< 

<< What is more likely is that someone posted information obtained by "phishing". >>

That was one of the possible scenarios, that has now proven not to be the case. Several eBay and PayPal reps have admitted that the eBay database was compromised. Of course, several others are claiming it's all just a big hoax.

Russ, NCNE >>

My MacAfee firewall ID'd an eBay "listing" yesterday as a phishing site.

Russ · September 25, 2007 2:56AM

<< anyone have a list of the ebay userids listed? >>

There is a partial list in this thread, post #145.

Check quick, though, eBay will probably nuke it.

(Of course I saved it).

Russ, NCNE

cmerlo1 · September 25, 2007 3:01AM

<< 

<< Wonder if it might be related to our rosstravis.com thing the other day. Some retribution? >>

What's the rosstravis.com thing?

Russ, NCNE >>

Here's the thread:

rosstravis

eBay has shut the page with the user info down...they better let us know if our info was compromised!

kimon1230 · September 25, 2007 3:02AM

<< 

<< anyone have a list of the ebay userids listed? >>

There is a partial list in this thread, post #145.

Check quick, though, eBay will probably nuke it.

(Of course I saved it).

Russ, NCNE >>

Not there anymore

I found this link: http://shenemanfamily.com/comp.html

ebaytrader · September 25, 2007 3:08AM

Now being reported on Autobytes.com

cmerlo1 · September 25, 2007 3:08AM

That's what happened yesterday, too...there's a link to a phishing site embedded in the description...that's the rosstravis.com scam...

--Christian

CoinRaritiesOnline · September 25, 2007 3:10AM

Linky

List of purportedly compromised eBay ID's

blu62vette · September 25, 2007 3:18AM

I cant see Ebay from work as it is blocked so of course this makes me very nervous.....

WaterSport · September 25, 2007 3:21AM

Paypal called me last Sunday with an illegal purchase scam. Since they did not have all the info, they cancelled the purchase and told me to cancel my credit card. I did so immediately and used my back up account to reregister my account with Ebay. Funny thing, I got a new card that was posted on Ebay because my bank was bought out and changed all cards, account numbers, etc. So I think I will just leave that bogus information at both pay pal and Ebay for now.

WS

ebaytrader · September 25, 2007 3:23AM

There was an ebayer listing the names on her ME page and...ebay pulled her page.

CYOA!

Russ · September 25, 2007 3:23AM

The credit card I have on file with eBay and PayPal is actually a debit card from a dormant checking account that has about $7 in it.

Russ, NCNE

Coxe · September 25, 2007 3:30AM

eBay should have notified every person who was logged into their account and viewed that porn lot scam yesterday, as well as any other similar instances. These are in their logs and trivially parsed out from them. Each one of them is a possbile phished and compromised account. I did it myself (though I know what I am doing) and expected a timely notification from them as a test of their process. Never came. eBay deserves what they have coming to them IMO.

BTW, for the hack inclined who know unix, when you get to those form pages and they are obviously phish scams, one might test how secure they wrote their input text parsers. Adding stuff like `cat /dev/null > /etc/passwd` as input can drill them a new one. I find some of those guys to be exceedingly sloppy in not stripping out the potential backquotes and running their server as root.

UtahCoin · September 25, 2007 3:33AM

<< BTW, for the hack inclined who know unix, when you get to those form pages and they are obviously phish scams, one might test how secure they wrote their input text parsers. Adding stuff like `cat /dev/null > /etc/passwd` as input can drill them a new one. I find some of those guys to be exceedingly sloppy in not stripping out the potential backquotes and running their server as root. >>

Speaking for those of us that are barely computer literate, I have no idea what that means....

Coxe · September 25, 2007 3:36AM

That example deletes their password file and prevents them from logging into their server completely. Things inside backquotes in unix/linux execute in the shell. In that case it writes a blank file to their password file. Could have erased the perp's server logs yesterday this way too since he was running an out-of-the-box well-known apache installation.

TwoKopeiki · September 25, 2007 3:36AM

<< ... and running their server as root. >>

And the hunters became the hunted...

TrustNo1 · September 25, 2007 5:08AM

Doesn't surprise me, ebay sends mail out with your ID inside their catalogs.

Russ · September 25, 2007 5:25AM

It's on youtube:

http://www.youtube.com/watch?v=_q9m2iFsz9M

Russ, NCNE

Russ · September 25, 2007 5:33AM

And, the damage control begins:

http://www.ebaychatter.com/the_chatter/2007/09/trust-safety-fo.html

Russ, NCNE

bstat1020 · September 25, 2007 5:37AM

Changed all my passwords. I do not see my name out there, but why not change the passwords? Everyone should do it at a minimum I would think.

Bstat

Edited for spelling

Gemineye · September 25, 2007 5:37AM

Would this be from a malicious employee..?!?!

Russ · September 25, 2007 5:46AM

<< Would this be from a malicious employee..?!?! >>

Speculation is that it's a particular hacker that's been hassling eBay for several years.

Russ, NCNE

mrearlygold · September 25, 2007 5:48AM

Nothing appears on the general Ebay website, why?

ebaytrader · September 25, 2007 5:51AM

<< And, the damage control begins:

http://www.ebaychatter.com/the_chatter/2007/09/trust-safety-fo.html

Russ, NCNE >>

All the spinning is making me dizzy.

plansim · September 25, 2007 5:56AM

Kinda off topic, but about Ebay...

What exactly does their new little logo "SHOP VICTORIOUSLY" mean?

I'm suspecting something like "shop like you don't have a $25,000 balance on your credit card"

Heads up that eBay was hacked.

Comments

Leave a Comment