Ebay account hacked!

[Deleted User]

I have been having someone in Mexico at 4am in the morning changing my password on Ebay. They are also trying to access my Amazon, Paypal and Netflix accounts. (i'm receiving emails stating this). This happened Thursday morning and now this morning.
I have changed all my log in passwords on everything.(including email accounts etc)
Strange thing is even after I changed my Ebay password they STILL changed it again for a second time. I no longer could access my ebay account.(i've now reset it again)
They have not yet managed to infiltrate any other of my accounts(that I'm aware of).
I have added two factor Authentication for everything now.
I just cant figure out how they knew my 2nd EBAY password. I can understand if they breached it the first time but after changing my password again they gained access a second time.
Anyone come across this before?
Thanks

arciere

The (almost) only way to change a password on a website is to have access to the email account, that's where the vast majority of websites send the password reset emails.
Did you change the password of your email account and activate the 2F authentication, if available?

avoidtheupsidedownbottles

Possibly a key-logger?

[Deleted User]

arciere said:

The (almost) only way to change a password on a website is to have access to the email account, that's where the vast majority of websites send the password reset emails.
Did you change the password of your email account and activate the 2F authentication, if available?

I don't believe they have access to my e-mail account as as the amazon authentication code gets sent to that address. Obviously if they had access  they would have used it to gain the breach.(I have since activated TFA to my phone)

[Deleted User]

avoidtheupsidedownbottles said:

Possibly a key-logger?

I thought about this but after changing all passwords the only breach they have managed so far is Ebay.(twice)

arciere

Are your passwords saved in the browser, for example Chrome? If that's the case, if they obtained access to your profile, then they will automatically have access to all the passwords that you save there.
Somewhere on Google (if you are using Chrome and/or Gmail) you can see what devices logged on with your credentials.

[Deleted User]

Yarciere said:

Are your passwords saved in the browser, for example Chrome? If that's the case, if they obtained access to your profile, then they will automatically have access to all the passwords that you save there.
Somewhere on Google (if you are using Chrome and/or Gmail) you can see what devices logged on with your credentials.

Yes my passwords are saved in my browser but there have been no breaches as I have checked activity on gmail etc and it's only me(so far..)
I'm thinking maybe somebody has a contact or works for ebay as for sure if they could gain access to any other accounts they would have used them (i.e. new TV from amazon etc...)

arciere

Deleted_User said:

I'm thinking maybe somebody has a contact or works for ebay as for sure if they could gain access to any other accounts they would have used them (i.e. new TV from amazon etc...)

Highly unlikely. Add the 2FA on eBay and see what happens.

[Deleted User]

arciere said:

Deleted_User said:

I'm thinking maybe somebody has a contact or works for ebay as for sure if they could gain access to any other accounts they would have used them (i.e. new TV from amazon etc...)

Highly unlikely. Add the 2FA on eBay and see what happens.

Yes I agree but can't see how else it's happened, and yes added 2FA to everything.

Henry2020

The thought that occured to me was that the person who had hacked your account hadn't logged out so they were able to change your password again. Could this be the possible reason?

AndyPix

Are you sure you are changing your password on the actual site, and not a clone that you have visited by clicking a link in one of these "You changed your password - if this wasnt you then click here :- " emails ..