eBay account hacked

Emily_Joy

I am still shivering a little, thinking what other information the scammers might have got... anyhow. This afternoon I logged into my ebay account, browsed for a little while and bought a dress. Then I went to take some photographs of items I wanted to list. Left my laptop in the room, logged in. When I got around listing the items a couple of hours later, I saw something very odd. A few classfield ads appeared under my account, paid out of my eBay balance. No email notification such as "item listed" or anything arrived through e-mail!  I removed bank cards, withdrew remaining balance that was left (not enough to pay for a classfield), changed password, called eBay. They said they will "action the account". Neither me nor them could see any new/unusual logins, but the adviser saw some login attempt that was identified as high risk.

1) The scammers obviously have access to last 4 digits of the payment cards, my name, and my full address. Previous address too.

2) What is their game? How listing a vehicle for sale under someone else account helps?

3) Anything else I am missing?...  

4) I have no clue how they got access. Public WiFi my only thought.

Newbie_John

2) If it's stolen? They know your address, they could make the sale in front of your door and then disappear completely.
Or some money laundering scheme.. who knows.

4) Is your password secure or password123? Do you use the same password elsewhere - which possibly may have been compromised? Check this website:
https://www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=https://haveibeenpwned.com/&ved=2ahUKEwiit8X3jMGJAxU3BNsEHbwOND0QFnoECAkQAQ&usg=AOvVaw1ItcUHGRUxCGZ4-dkp3Qv7

Change your eBay password, contact eBay, delete the ads. Can't think of anything else there.

Keep an eye on your bank statements for a while as well.

Emily_Joy

They know my address. But the vehicle location according to the listing is about 200 miles away. Spoken to eBay twice already. Whoever got access managed to change the phone number on the account. I have not received any emails/text messages to my existing phone number. The phone number they changed it to is a foreign one. 

Newbie_John

Emily_Joy said:

They know my address. But the vehicle location according to the listing is about 200 miles away. Spoken to eBay twice already. Whoever got access managed to change the phone number on the account. I have not received any emails/text messages to my existing phone number. The phone number they changed it to is a foreign one. 

Then they could do something as stupid as - pay £100 deposit (refundable 😂) and I'll guarantee the car will be there waiting for you to see it - as I already have few people coming..

Yeah if you changed password, passcode for app, phone number and told eBay then can't think of anything else.

vacheron

As this occurred when your machine was left logged on and unattended you have may have remote control software unintentionally installed on your computer. This could be configured to alert the hackers when your PC is logged in to a secure site but has dormant for more than a certain period of time, triggering them to connect to your PC and gain access to your account details. 

It could be worth running a full anti malware scan of your PC as a precaution. There are plenty of reputable free scanners out there. 

GadgetGuru

With your name and address, and just the last 4 digits of your card/s, there's not much they can do. 
My bets are they where hoping you would not notice the new listings, so that they could profit from deposits or and funds sent across from the listings. Strange they didn't reset the eBay password in order to try lock you out of your account though. 

You've done the right thing by changing your password etc though. 
As a precaution, I would change your banking passwords too. 

Also follow the excellent advice in the above post RE scanning your computer. 
Check and uninstall and remote software, like LogMeIn, Teamviewer, or AnyDesk, and run a full scan on your computer. 

soolin

If you didn’t get the change of details emails nor any 2FA warnings it seems likely the hacker has access to your email account, and that might be where the hack occurred . I would do as Vacheron suggests and do a deep clean of the device and any others you use for email. The techs board have some excellent links to some super powerful scans. 

Emily_Joy

Thank you everyone. I use a very rare Linux distribution and it extremely unlikely a malware is installed on the laptop. I will change email password as a precaution. Although it is possible that the browser (chrome) has a vulnerability they exploited. A more likely scenario is that it is my phone... as I occasionally login to eBay from my phone via opera browser, not via the app.  I could of course just re-install the system on the laptop as a precaution.

ETA: apparently, they managed to remove item listed and item sold notifications. When I re-set email notifications, I have not received any confirmation either. So either notifications are disabled in my settings, or this is default behaviour.

bealine99

Just had my EBay account hijacked.  I am used to just going straight in and ordering and checking out without looking.   I saw in my "Shopping Cart" an IPhone 16 for £1200.00, which I deleted.   (I thought it strange, but then yesterday I had been looking at second hand IWatches).   I placed my order for a £7 item anbd returned to look at a garden sprayer for £28.   I ordered it and, only when I paid, did I realise the address was not my own.   I tried  to cancel both items but the £7 was already on its way.   I'm still waiting to see if I can get the sprayer cancelled.

The address the Scammer is using is D526624, 68 Tanners Drive, Blakelands, Milton Keynes  MK14 5BP which is a premises called "RESHIP (UK) LOGISTICS SERVICES LIMITED" and it is pretty obvious what they are doing.   Of course, the police are not interested and have just referred me to "Action Fraud" which seems to do very little.

Like the original poster, I consider myself pretty savvy - I use a secure, encrypted email service (Mailfence), regularly virus scan my pc and run Malwarebytes.   Somehow, somewhere, someone has managed to access my EBay account. 

Please be on your guard.