EBay Hackers

[tommy.irene]

www.itv.com/news/story/2014-05-21/ebay-users-urged-to-change-passwords-after-hacking/      .http://www.bbc.co.uk/news/technology-27503290

[love*today]

Weird, I signed in directly from this board and the page refreshed to a community page?

I wasn't going to bother changing my password, I might do it now though.

What is the threat to us?

[lionrose.7]

I just did it yesterday like Jimmi said , changed my password and got a email from ebay confirming the change

[fourandsixpants]

been trying all day to no avail. Even tried calling ebay no good, they suggest via recordg to do the ebay chat thing. 14 min wait....will try again later. Tried doing jimmys way as suggested above, no good just got redirected back to same rounabout!:

"Enter your registered eBay email. If you don't remember your registered eBay email, enter your user ID.".......just not getting a response from ebay at all.

[purple_haize]

---

@paintsew007 wrote:

been trying all day to no avail. Even tried calling ebay no good, they suggest via recordg to do the ebay chat thing. 14 min wait....will try again later. Tried doing jimmys way as suggested above, no good just got redirected back to same rounabout!:

"Enter your registered eBay email. If you don't remember your registered eBay email, enter your user ID.".......just not getting a response from ebay at all.

---

from when I did it this morning, it took the email 2 hours to get to my mailbox at yahoo.

[mainecoon1]

Seems a bit weird that people are getting different instructions to change their password, like you lionrose I did it through my account and it changed straight away i think it took me all of 1 minute to do it. 

This morning when I checked my email I noticed EBay had sent me an email confirming my password had been change it seems odd that some people have to wait for an email from EBay before they can change theit password.

[go-tazz]

---

@love*today wrote:


What is the threat to us?

---

Security experts warned that the stolen information would make eBay customers easy targets for phishing attacks, in which criminals send emails that bait victims into clicking on malicious links or direct them to fake log-in screens where they are asked to enter more valuable information like a password or a Social Security number.

“Expect an uptick in phishing. Do not click links in email or discuss anything over the phone,” warned Trey Ford, a strategist at Rapid7, a security firm in Boston.

This could also lead to hijacked accounts.

The dormant accounts on the different sites also pose a problem as the owners of those account might have

"forgotten" about the account,(they are a favourite account to hijack for scammers),

If the hackers on sell the eBay accounts with the usable password it could cause a real issue,

[jimmy*part4]

---

@kopenhagen5 wrote:

Jimmy, here in Australia they either send a link to your phone or email to change the password.

An extra security precaution I guess.

---

Thanks for the answer. I never click a link in emails for the reasons Grumpy mentioned, better to log in directly.

China has a warehouse thats full of computers and people hacking others computers 24/7. I've heard there are 2 types of large corporations here....those that have been hacked, and those that just don't know it yet. 

[colic2bullsgirlore]

In my opinion The primary tool I used to detect a spoof email was the fact that a spoof email was addressed to

"Dear ebay member".....see the link or copy and paste below

http://pages.ebay.com.au/help/account/ebay-email.html

######################################################

Spoof emails often include a generic greeting.

For example, "Attention eBay member."

√ Our email greetings typically contain the first and last name you registered on your eBay account, and your eBay user ID.

#######################################################

However the hackers will now have my ebay username linked to my real name and address.......and 140,000,000 others

The only way a scammer could have got those details previously was to commit to purchase off me.

On top of that....... I changed my "secret question" because it dawned on me that when I forget my passwords or have

an ATO I generally need to deal with a real ebay rep ........ who had access to my secret question and answer........

as I believe the hackers would also have had access and therefore recorded my "secret" answer.

IMO The only way to restore the privacy (and security) that surrounded my account previously would be to close the

account an reopen it as any id change is also recorded and available for public scrutiny. Changing passwords is only a

stop gap measure that ebay has applied to try and appease members during the intiial shock of the announcement.....

[colic2bullsgirlore]

In my opinion The primary tool I used to detect a spoof email was the fact that a spoof email was addressed to

"Dear ebay member".....see the link or copy and paste below

http://pages.ebay.com.au/help/account/ebay-email.html

######################################################

Spoof emails often include a generic greeting.

For example, "Attention eBay member."

√ Our email greetings typically contain the first and last name you registered on your eBay account, and your eBay user ID.

#######################################################

However the hackers will now have my ebay username linked to my real name and address.......and 140,000,000 others

The only way a scammer could have got those details previously was to commit to purchase off me.

On top of that....... I changed my "secret question" because it dawned on me that when I forget my passwords or have

an ATO I generally need to deal with a real ebay rep ........ who had access to my secret question and answer........

as I believe the hackers would also have had access and therefore recorded my "secret" answer.

IMO The only way to restore the privacy (and security) that surrounded my account previously would be to close the

account an reopen it as any id change is also recorded and available for public scrutiny. Changing passwords is only a

stop gap measure that ebay has applied to try and appease members during the intiial shock of the announcement.....

[catsnknots]

ok.. so I didn't read this thread yesterday... maybe I should have... 

the first I hear about it is when I turn on the radio today... 

My question is why didn't I get an email about this????? 

To me this is important information that should have been disclosed the day they found out... 

Shame on Ebay.... 

I suggest everyone get access to their credit details... it will show you what companies have had credit applications in your name and this will be the first indicator that your credit line is in jeopardy. 

[purple_haize]

we didnt get an email, but it is at the top of the page when you sign in.....

Plus they have only just found out what is going on.