eBay (UK) hacked?

fabfor

Thank you so much, alykatz! That link gets to the very heart of the problem. Knowing eBay, it shouldn't surprise me that they don't verify new members' addresses before allowing them to bid, but it does ...

fabfor

Just in from eBay:
This is a follow up email with regarding the issue that you are able to view the administratively ended item in search results. Please accept our sincere apology for the time taken in resolving this for you. This was very unfortunate situation wherein the resolution for your concern was not up to mark. We don't like to see our customers upset and inconvenienced. We always strive to create a positive customer experience.
As promised while on chat, I have already escalated the issue and our technical team is still working on it. I!!!8217;d appreciate your patience and understanding in this matter. I trust this issue will be resolved as soon as possible. I'll get back to you as soon as I get an update on your concern.
Will get back to you as soon as possible.

Might not lead anywhere but I'm impressed that they're trying to tackle it.

forgotmyname

Standard foboff email. Thats the one they send after the its all your fault email.

As mentioned someone registers with fake details, bids and then they get banned and show as unregistered.

System detected 20 accounts on the same IP for example. The person doing it doesnt need to hide their tracks that well. They create 20 accounts and do the deed and then create another 20 with a new IP later and repeat.

Nothing has been hacked.

Your username in her is not your real name did you hack this site? No.

fabfor

Well, one thing's for sure - this is a serious and sustained cyber attack which eBay has been unable or unwilling to counter.
And by erasing all evidence of the fake sale, eBay scuppers the 'second chance' option that a seller might otherwise use to minimise the effect of the attack.
Strangely, access is being denied to two links I was able to access just yesterday:

https://community.ebay.co.uk/t5/Seller-Central/Fake-Bidders/m-p/5844703/highlight/false#M399398

https://community.ebay.co.uk/t5/Seller-Central/Fake-Bidders/m-p/5899820/highlight/false#M404434

Anyway, this is killing the auction format on eBay which is bad news for a lot of people, myself included; isn't it a candidate for Martin Lewis's attention?

soolin

fabfor wrote: »

Well, one thing's for sure - this is a serious and sustained cyber attack which eBay has been unable or unwilling to counter.
And by erasing all evidence of the fake sale, eBay scuppers the 'second chance' option that a seller might otherwise use to minimise the effect of the attack.
Strangely, access is being denied to two links I was able to access just yesterday:

https://community.ebay.co.uk/t5/Seller-Central/Fake-Bidders/m-p/5844703/highlight/false#M399398

https://community.ebay.co.uk/t5/Seller-Central/Fake-Bidders/m-p/5899820/highlight/false#M404434

Anyway, this is killing the auction format on eBay which is bad news for a lot of people, myself included; isn't it a candidate for Martin Lewis's attention?

The first thread is visible but locked, it looks like the second thread has been removed.

bxboards

Ebay has always offered the facility to combat fake accounts very effectively - most fake accounts do not have a credit card or debit card attached - so enable 'bidders must have a credit card onfile' in your bidder requirements, also ensure they have a Paypal account as a buyer requirement.

I wish people would stop mis-using the words 'cyber attack' and 'hack' - actually MSE is one of the worst for claiming things are 'hacks' when they are nothing of the sort.. no hacking or cyber attack is required to create a false account, Nigerian scammers have been doing this for years.

fabfor

The surprising thing about this is that eBay has been totally ineffective in dealing with it; a quick check on the eBay forum (or just follow the link provided by alykatz above) should make this clear.
I've tried moving on from hack to cyber attack in an effort not to get side-tracked. I'll try sabotage next.

fabfor

Yep. Thanks.

fabfor

Thanks to soolin. :-)

forgotmyname

How do you suggest ebay block new bidders?

Block everyone without a credit card? But not everyone will have a CC.

Block IP address? With the right ISP simply power off the router to get a new one, or use a VPN or a simple proxy.

Next?

ps. I just created an account for you fabfor_from_moneysavingexpert and you have bought a Range Rover. Must be collected this weekend.

Pretty sure you told me to bid on it for you.