Topic: Electronically Hijacked

[medic09]

So I got an email this AM allegedly from Ebay.  Looks legit, but I can't really tell.  Titled "A26 TKO NOTICE: Restored Account - myscher.

It says my account was used by someone else to send out emails to members, but doesn't appear that any actual offers or bids were made with it.  The account has been frozen, and there are instructions how to access and then change my password.  It also recommends changing the password on my personal email account.

Anyone else have experience with this, before I maybe get sucked into something?

Thanks!

[ekim98]

Do not respond to it. There is a link on ebay to send spoof email. There trying to confirm personal info about you.

[333]

Ditto!  I got a similar email and I don't even have an Ebay account!

[medic09]

Well, I am not able to log in to my account...

[medic09]

Dont log into your account throught the email. If you have logged in through the email, your account may be stolen already. Contact ebay about this ASAP.
    When I get these, I go to my ebay account to see if it is legatimate. If it is a legitamate email, you should have info about it in your ebay account (your ebay home page)
    I get these types of emails every week and most are spoofs. They all have the "immediate attention required" tone to them. They are often posed as coming from ebay and paypal.
 DG

I tried logging in by going to the account on my web-browser.  It won't take my password.  I, too, have gotten spoofs in the past.  I've always deleted them without any action.  Often, though, there is some clue that they're not right.  This one is more professional sounding, coupled with the fact that I can't log in.  The only suspicious thing I see (maybe) is the return address is 'moreinfo@ebay.com'.

See what you all think:


 eBay sent this message to Mordechai Scher (myscher).
Your registered name is included to show this message originated from eBay. Learn more. 
 A26 TKO NOTICE: Restored Account - myscher   
 
 
 
 
Dear myscher

It appears your account was accessed by an unauthorized third party and used to send unsolicited emails to other community members, including email offers to sell items outside of eBay. It does not appear that your account was used to list or bid on any items. Additionally, the email address on your account may have been tampered with, which is why you may not have received any emails about this activity.

At this time we have taken several steps to secure your eBay account. Rest assured that your credit card and banking information is safe on the eBay site. This information is kept encrypted on a secure server and cannot be viewed by anyone.

To regain control of your account, please complete the following:

1. Change the password on your personal EMAIL account to verify that it is secure and cannot be accessed by anyone other than you.
2. Change the password on your eBay account. To do so, click the "Forgot your password" link on the eBay sign-in page and change your password using the instructions provided.
3. Follow the steps below to secure your account:
> Click on the "Security & Resolution Center" link found at the bottom of most eBay pages.
> Click on the "eBay Account Protection" link in the "Online Security Resources" box. This will take you to the help page titled "Securing Your Account and Reporting Account Theft."
> Follow the instructions provided in "Securing Your Account".

As you take these steps, please be aware that you may need to repeat the instructions provided above or use the "Back" button on your Web browser to return to the "Securing Your Account" page.

To learn more about these fake or "spoof" eBay emails, visit the "Security Center" link found at the bottom of most eBay pages followed by the "Stopping spoof emails and Web sites" under "General Online Safety."


Password guessing

If you use a fairly simple or easy-to-guess password, it is possible that someone could guess it after repeated attempts. For this reason, it is important to use a password that consists of a combination of letters and numbers and is not related to your user ID, name, or anything you buy or sell. It is also important to use different passwords for the various online accounts you use (email, PayPal, etc).


Computer viruses

There are a number of computer viruses in circulation that log and record keystrokes. It is recommended that computer users keep their virus alert software up-to-date and regularly check for operating system and web browser updates. A firewall for high-speed internet users is also highly recommended.


Any inquiries regarding your password or other information about your account can be sent to us by clicking "Help" on any eBay page and then selecting "Contact Us."

If you are contacted with questions about the messages that were sent from your account or other related issues, please refer those individuals to the web address provided above.

Regards,

eBay Trust & Safety

 
 
 
 
 
 
Learn how you can protect yourself from spoof (fake) emails at:
http://pages.ebay.com/education/spooftutorial

This administrative email was sent to myscher@comcast.net from eBay. Your account is registered on www.ebay.com. As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements. If you would like to receive this email in text format, change your notification preferences.

See our Privacy Policy and User Agreement if you have questions about eBay's communication policies.
Privacy Policy: http://pages.ebay.com/help/policies/privacy-policy.html
User Agreement: http://pages.ebay.com/help/policies/user-agreement.html

Copyright © 2006-2007 eBay, Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are registered trademarks or trademarks of eBay, Inc.
eBay is located at 2145 Hamilton Avenue, San Jose, CA 95125.
 

[cb750k7]

Hi Mordechai,

Same happend to me.

You will have to change your password.

Try to contact Ebay hot line.

Get ready to receive some &^$$&*$&$ Emails from annoyed sellers...

Bye
Jona

[medic09]

Based on Jona's response, looks like this is for real.  Sure enough, I went on Ebay and changed password and it had copies of the notices in my messages box.  I hope 'my' identity didn't cause too much hassle for anybody. 

[754]

Ebay should have your Phone # Thats what I tell myself when I get wierd emails..

I wouldnt even bother calling DEAD HELP..err I meant Live Help..

[PanAmerican]

Based on Jona's response, looks like this is for real.  Sure enough, I went on Ebay and changed password and it had copies of the notices in my messages box.  I hope 'my' identity didn't cause too much hassle for anybody. 

Same thing happened to me.  Somebody hacked my eBay account.   The message from eBay was legit.  Somebody was sending bogus email to other eBayers using my account name.  No actual transactions were involved, just stupid messages sent to other users in my name.  Several members were rather pissed at me and I had to smooth some ruffled feathers and let them know it really wasn't me.  BTW, I changed both my username and my password on eBay.

[Dennis]

I would phone them if you have any further questions, problems or concerns. Sorry I did not record the phone number. 
Paypal suspended my account (which I only discovered after I made a purchase) because  I never accepted the new terms that they published about 2 years ago. I phoned, got a representative on the phone quickly and we sorted the thing out in a reasonable and very timely manner. I was quite surprised at how well it went considering my previous communications with them. Since Ebay and Paypal are now the same company I would call them if I felt that there were any details that still needed addressing.
At least they didn't get into your financial stuff, but it does make you wonder how secure this all is, doesn't it?
Good luck.

[seaweb11]

I read your email from Ebay earlier and thought it looked like a straight up email as well/ They did not ask you to "click here" to send password info. They directed you to their site.

P.S. I had a cool experience the other day on a web site I was buying Christmas gifts from. I wanted to know if it shipped yet.
One of the choices was a "live chat" with a representitive......30seconds later they responded and I was sorted out in real time.
 I found this cool site last year when someone from here posted some inexpensive "Honda riding boots" at $22.00 instead of $180.00.

I bought 2 pairs and they were beautiful leather boots. 

I did all my Xmas shopping with them this year. One box shows up at my front door 7 days later and I wrap.
http://www.sierratradingpost.com

[Dennis]

I read your email from Ebay earlier and thought it looked like a straight up email as well/ They did not ask you to "click here" to send password info. They directed you to their site.

P.S. I had a cool experience the other day on a web site I was buying Christmas gifts from. I wanted to know if it shipped yet.
One of the choices was a "live chat" with a representitive......30seconds later they responded and I was sorted out in real time.
 I found this cool site last year when someone from here posted some inexpensive "Honda riding boots" at $22.00 instead of $180.00.

I bought 2 pairs and they were beautiful leather boots. 

I did all my Xmas shopping with them this year. One box shows up at my front door 7 days later and I wrap.
http://www.sierratradingpost.com

same here regarding those boots --- very good site to deal with if you see something you like

[medic09]

I first bought some outdoor gear from Sierra Trading Post about 16 or 17 years ago, when I lived in Texas.  I have always had good experience with them.   It is a little easier when you are already familiar with the item.  They buy up closeouts and can't possibly know every product really well.  They definitely put out a real effort with the customer service, though.

[Raul CB750K1]

This is what happened to me the other day. I received an eBay message asking "have you decided yet?" I didn't remember the ebay member, I didn't remember having bid or track any item from him, so I didn't even respond "to what?", that seems to be the natural thing to do. I copied the article number, opened another session, and eBay said "this item was deleted".... mmmm, suspicious. So I checked the properties on the "view member info" and it directed me to htpps://ebay.com/whatever etc. So I clicked on it... and suddenly my Norton Antivirus blocked the page telling me I was trying to access a known physing page, and that I was strongly recommended not to access it.

I asked a friend of mine about it. He told me that, even through the secure page of eBay, some hackers get access to your information via vulnerabilities on Internet Explorer. So watch out.

[medic09]

No, DG; the pitiful thing is that IS their life. 

[mark]

This is what happened to me the other day. I received an eBay message asking "have you decided yet?" I didn't remember the ebay member, I didn't remember having bid or track any item from him, so I didn't even respond "to what?", that seems to be the natural thing to do. I copied the article number, opened another session, and eBay said "this item was deleted".... mmmm, suspicious. So I checked the properties on the "view member info" and it directed me to htpps://ebay.com/whatever etc. So I clicked on it... and suddenly my Norton Antivirus blocked the page telling me I was trying to access a known physing page, and that I was strongly recommended not to access it.

I asked a friend of mine about it. He told me that, even through the secure page of eBay, some hackers get access to your information via vulnerabilities on Internet Explorer. So watch out.

I get fake ebay phish emails on a pretty regular basis. I forward them all to   spoof'at'ebay.com   and let them try to chase the buggers down. Or whatever.

As for Internet Explorer and it's many vulnerabilities..... I use Mozilla Firefox. As a bonus, the AdBlock Plus plugin does a great job of disappearing those pesky Google ads.


Happy trails.

[BobbyR]

Well unless you have a lot of feedbacks I would just cancel that account and start a new one. They can't do anything with  a dead account.

[DarkRider]

+1 on using firefox..