Paypal - been hacked?

brody77

Hi all.

Sold an item on ebay today & went to log in to my paypal account to withdraw the funds.

HOWEVER, as soon as I logged in, it went to a page I recognised from a spoof email I once received - the first giveaway was the bad grammar, then it asked for social security, ATM pin & checking account details.

I called paypal right away & have prob run up about £10 at least on their 0870 number. (just in case, I got the number from another pc)

The girl I was speaking to was pretty much no help - she kept putting me on hold & her first reply was "I've spoken to a senior colleague and this is part of paypal" - despite her previously telling me I wasn't showing as being logged in.

She also advised the request may have come up as I also log in from work - last time I used my a/c was early last week.

She eventually agreed it was suspicious, told me she'd put a limit on my account, and I was to run a virus/spyware scan & then try from work tomorrow.
Also to keep an eye on my online statements.

The fact I didn't get to this via a spoof email, but by manually typing the address into the address bar is worrying the hell out of me though.

To be honest, even the phone call was making me dubious, despite it clearly going through an IVR system, it just didn't sound too professional.


Anyone else been in the same position?
Am I just over paranoid?

Crazychik

I had my ebay account hijacked a few days ago, I would try changing your password immediately just to be sure, and do keep an eye on your funds, if poss, transfer them straight away into your bank!

Friv Fay helped me out tremendously - Im sure she will be along soon with other advise!

frivolous_fay

If logging on as normal to ebay / paypal is taking you to a dubious page, I suggest running some virus checkers / spyware removers.

You really need to deal with that before logging in ANYWHERE... you could easily have a keylogger on your machine.

If you can access your accounts on a safe machine (friend?) you could reassure yourself that you haven't lost any money, or had fake listings put up... and if you do that you can change your password. If you do have dodgy listings on your account, you'll need the live help link... brb...

frivolous_fay

https://livechat2.ebay.com/Chat/servlet/AppMain?grp=ATO&__lFILE=index.jsp

zappahey

Some computer nasties do something called DNS poisoning, which means that when you type in a website address you get sent to a different, dodgy site.

Get your PC seen to pronto, you can get some help on the Techie board.

Browntoa

The hosts file is read with (and before) each DNS name request, so you don't have to do anything once you change it.

Lines that start with "#" are treated as comments to end-of-line, so just comment out the entries you want to "get through."
In WinNT, XP, 2000 -- the hosts file is found as /WINDOWS/SYSTEM32/DRIVERS/ETC/hosts
and in Win9x/Me it is found as /WINDOWS/hosts
Edit it with WordPad or NotePad (do not let either wrap lines or apply formatting) -- it is tough to open normally since it has no extension, from explorer you have to specify the app each time, or open NotePad and open it from there, or, better yet, create a desktop shortcut that tells NotePad to open the hosts file -- use a target like this: B]C:\WINDOWS\SYSTEM32\NOTEPAD.EXE C:\WINDOWS\SYSTEM32\DRIVERS\ETC\[B]hosts[/B][/B


Then you can click on it to edit it whenever you like.

it should have just 1 line that says

127.0.0.1 local host