Anyone else getting this on E-bay Today? EDIT - need Paypal Q answered ASAP Help Please - Page 2.

BobS · December 11, 2009 1:11AM

So I went to log in to My ebay today, and after a long pause, this page comes up. The addy starts with https, but this can't be ligit, right? SS#, credit card #, ATM PIN? I of coarse didn't do anything with it. Have I been hacked?

We have noticed an increasing fraudulent activity recently. In order to provide your security and protect you from fraudsters we have introduced a new system of identification that will help us to avoid any kind of fraud or unauthorised access.

Please enter as more information as possible to provide your complete identification and to activate all the features of the new system.

User Information:

First Name: Last Name:

Date of Birth (mm/dd/yyyy):
/ /

Social Security Number:
- -

Mother's Maiden Name:

Card Information (ie, ATM, debit, credit card):

Card Number:

Card Expiration Date (mm/yyyy):
/

Card CVV2:

ATM PIN:

Continue

gumbyfan · December 11, 2009 1:13AM

I've been on eBay today and I didn't see anything like that. There's no reason they'd ask for your ATM pin. Did you follow a link to get to eBay, or did you type in ebay.com to get there?

BobS · December 11, 2009 1:17AM

I typed www.ebay.com.

Update - I was able to get to my ebay page by searching for a card, then adding it to my watch list - which then asks for me to sign in. Just entered my user and pass like normal and everything worked like it should, Weird.

Bigjohn69 · December 11, 2009 1:17AM

forward the email to ebay at spoof@ebay.com run virus scan get that out of your system, its being compromised,,, bj

BPorter26 · December 11, 2009 1:18AM

Bob, You have been hacked. This happened to me about a year ago. I had to change my password because of this.

2cardguys · December 11, 2009 1:19AM

definately not legit... are you running any type of anti-virus/security program? You could possibly have a browser hijacker program hidden on your computer...BTW eBay is not a secure sightso the addy shouldn't have https

Ken

yankeeno7 · December 11, 2009 1:42AM

Change your password NOW

storm888 · December 11, 2009 1:46AM

A legit sign in addy will always read:

https://signin.ebay.com.

..........................

EBAY Instructions

To sign in:

Go to the sign in page.

Important: Be sure the Web address of your sign in page starts with https://signin.ebay.com.

Enter your user ID and password.

2cardguys · December 11, 2009 1:50AM

<< A legit sign in addy will always read:

https://signin.ebay.com.

..........................

<< 

I sit corrected

.. you are absolutely correct as I forgot he was talkling about the sign in page... I just glanced at the addy in my browser and I was already signed in.

Ken

BobS · December 11, 2009 1:50AM

Storm - that was the address.

It was not an email. It was a website that popped up when i tried to log in. i just went back and it did the same thing. I think I'm f'ed.

Here was the web address of the page:

https://signin.ebay.com/ws/eBayISAPI.dll?co_partnerId=2&siteid=0&UsingSSL=1

digicat · December 11, 2009 1:56AM

<< Storm - that was the address. >>

Did this screen "pop up" when you tried to go to Ebay (e.g. a new window opens up on top of the one you were using), or was this the screen?

If so, then you've got a virus/malware/spyware problem.

BobS · December 11, 2009 2:01AM

No new window, just froze up a little and then went to the new page. I have tried to get to My Ebay a few tiomes since (using the add item to watch list) and keep getting the page asking for all this info. Guess it's time to call the IT dude.

digicat · December 11, 2009 2:04AM

This isn't normal activity. Malware's causing your browser to do weird stuff... OR the DNS server of your office or ISP has been poisoned.

Take a screen shot of the questionable screen and keep it for your records.

hold down the keys ALT and PrtScn with the bad window open, then open up a Word document and Right-Click>Paste.

BobS · December 11, 2009 2:30AM

I get the same type of thing when I try to log into paypal. Something most def on my machine.

Going to try and change both passwords using my phone.

This blows.

2cardguys · December 11, 2009 2:34AM

if you don't get rid of the underlying problem then using your phone to change your passwords (while a good idea) won't solve the issue. You either have a trojan horse or browser hijacker program installed on your machine...

edited to add link to free scan

McAfee free scan

storm888 · December 11, 2009 2:49AM

This has worked pretty well for me and it is "free."

spybot

The keylogger threats are defined:

keylogger threats

All other threats are defined and can also be searched and removed.

The sundry products are NOT samples. They actually remove/fix the problems.

..............

None of their products should be installed on computers
that are NOT owned by the installer.

..................................

I also use the paid version of McAfee Security Suite.

FavreFan1971 · December 11, 2009 2:56AM

Bob you need to scan your computer too for Malware. Grab malwarebytes.org. The free one. Great product.

Bigjohn69 · December 11, 2009 2:56AM

i have used this free anti virus for years,, this year they added the spy ware to take it out of your system on a daily basis, maybe it will work for you,,, bj
FREE ANTI VIRUS PROGRAM

BobS · December 11, 2009 3:09AM

Guys -

I cant do any scan myself - company computer. Puy a call into the IT guy and am awaiting his call.

I was able to change my ebay password and I removed the CC on file using another machine.

Have a question regarding paypal. When I clicked to change my password, it asked me to confirm the full CC # and full bank account number that I have on file. Is this standard procedure when changing a paypal password?

Bigjohn69 · December 11, 2009 3:12AM

you have the answers good luck,, bj

BobS · December 11, 2009 3:16AM

Can someone check on their paypal account if you click to change password, does it ask for account info?

al032184 · December 11, 2009 3:20AM

I don't think it does, I am on there right now, it looks like you just need to put in your old pass, then change it.

zep33 · December 11, 2009 3:21AM

yes it does

asks you to verify bank, credit card, etc.

BobS · December 11, 2009 3:28AM

Thanks Zep -

Anyone else. I feel safe using the other computer but want to be 100% sure I'm seeing what everyone else would see.

Thanks guys.

BobS · December 11, 2009 3:47AM

Anyone else?

jdmi32 · December 11, 2009 3:54AM

Mine only asks for the current password, the new one, and the new one again to confirm.

al032184 · December 11, 2009 3:58AM

I just logged on to paypal, went to the profile page, then to the password link. I changed my password, I had to put in my old pass, then pick a new one, and confirm it. They didn't ask me to confirm any other info. When I logged out, then back in with the new pass, they didn't ask me to verify anything.

schr1st · December 11, 2009 4:01AM

I hope you are able to get your issue resolved, and that by contacting your IT department about the issue, it doesn't open a whole new set of problems for you (IE: using your work PC for personal things, how your got the malware in the first place, etc.).

storm888 · December 11, 2009 4:06AM

Trying to change a PW from a computer that PP does
not find to be "associated" with your account, can trigger
a series of extra confirmation steps.

The steps range from asking the user to confirm the linked bank
account/credit card number TO requesting that you call a PP rep.

BobS · December 11, 2009 4:12AM

That may be it storm. I'm still hesiatant to enter anything from these work computers though.

ElToroLoco · December 11, 2009 7:41AM

<< Trying to change a PW from a computer that PP does not find to be "associated" with your account, can trigger a series of extra confirmation steps. The steps range from asking the user to confirm the linked bank account/credit card number TO requesting that you call a PP rep. >>

The same thing happens at my work, most of the time the website asks a question I answered when I opened the account. The rule I tend to follow is, anything asking for a SSN, credit card # or something in that nature is probably a scam. Anything asking for my credit card "code on the back" is a scam. Anything asking for my ATM PIN number is DEFINITELY a scam!

zep33 · December 11, 2009 10:04AM

<< Trying to change a PW from a computer that PP does
not find to be "associated" with your account, can trigger
a series of extra confirmation steps.

The steps range from asking the user to confirm the linked bank
account/credit card number TO requesting that you call a PP rep. >>

That makes sense since I went to it from my work PC. Not the usual one I use but one I do log into several times a week

Anyone else getting this on E-bay Today? EDIT - need Paypal Q answered ASAP Help Please - Page 2.

Comments