gingersnapp
|
posted on July 5, 2002 10:41:14 AM new
I awoke this morning to find that I was selling a 6,000,000 dollar Lear Jet along with a Sony Computer that already had bids to 1400 dollars, a dutch auction of 3 computer with 2 bids of 900.00. My account had been taken over and I had no access as my password had been changed. I emailed safeharbor first thing but knew that it would be a few days before it would probably even be read. It just happened that a person at ebay noticed the Lear Jet and called me to confirm that I had listed it. They ended the auctions and set me up with my old id and a new password. Just thought it worth mentioning as I should have changed passwords every so often and this would not have happened (maybe). Whoever it was picked me with 3500 positive feedback, 5 years on ebay and chose a holiday weekend in hopes I would not check my account until Monday, the auctions were to end Sunday. Kinda scary, never thought it would happen to me.
gingersnapp
|
sn0bbish
|
posted on July 5, 2002 11:10:46 AM new
whoa! thats scary.
|
slabholder
|
posted on July 5, 2002 11:11:46 AM new
gingersnapp two questions,
When you signed in onto ebay in the past, did you use the SSL option?
Did your password include letters and numerals?
Slabholder
|
slabholder
|
posted on July 5, 2002 11:21:59 AM new
http://zdnet.com.com/2100-1106-871061.html
|
gingersnapp
|
posted on July 5, 2002 02:12:07 PM new
slabholder: I had not even thought of that, didn't even realize you could, always Make sure the lock is locked if giving CC number when purchasing, I will check that out for sure!
My password did contain numerals and letters but has been the same for 5 years and I used my last name along with a family number. (they say never use your name and I believe that now)
|
yumacoot
|
posted on July 5, 2002 02:55:13 PM new
I guess this is a really stupid question, but why would they pick someone else's account to list their items under?
|
stusi
|
posted on July 5, 2002 03:32:36 PM new
Like someone would pay for the jet without putting the money into escrow where verifications would be done!
|
bidsbids
|
posted on July 5, 2002 03:35:52 PM new
I think eBay should limit the number of times a user can try their password before locking them out. Hackers sometimes use automatic password kits to gain access to accounts but the kits do not work very well if the number of tries is very limited.
I'm with yumacoot, it seems odd that they would sell bogus items under someone else's account when they could do a better job under their own. Sure a 3500 rating and 5 years eBay service looks good but the chances of ever pulling it off under someone else's account are very slim. I think the hacker may have either wanted to upset/ruin the seller or it was a random entry because of the easy password.
|
dmrick
|
posted on July 5, 2002 04:59:21 PM new
I wonder if I'm reading this wrong. The hacker wouldn't really have those things to sell, would he? I would assume that he would sell "bogus" items and have the money sent to an address where he would get the money. The people wouldn't get their items and would go after the original site owner. Of course, by trying to sell a lear jet, he put out a red flag..so it's not a very smart hacker.
|
gingersnapp
|
posted on July 5, 2002 08:29:25 PM new
The person who hijacked my account planned on making some bucks and then running I assume. But listing a Lear Jet was pretty stupid in my opinion too. I guess I am lucky it was a stupid crook instead of a smart one.
|
Libra63
|
posted on July 5, 2002 08:59:50 PM new
It sounds like to me that someone didn't like you or something has happened between you and the new seller. I can speak for experience on a subject like this except it was from magazine subscriptions. All of a sudden I started receiving magazines I didn't order. I called the magazines and the ones I couldn't reach I wrote a letter telling them what happened. I asked for a copy of the form that had to be sent in. All of them sent their copies. Of course they stopped my account and I found out by the writing who had done it. I was a teacher and a student didn't care for the way the grades went. They were in a technical course so they were 18 years old. It's sad people have to do bad things to others.
I think that eBay has checks and balances when it comes to bids that go into the $1,000.00, and when a bid is made it must do an alert of somekind and then before the bid is registered they call the bidder. I imagine when an item this large is up for auction they do the same thing.
I sure am sorry to hear about this and I am glad that eBay was on their toes to catch it.
|
deco100
|
posted on July 6, 2002 05:51:02 AM new
Something like that happened to me at Paypal. Here I am selling and buying small priced items and all of a sudden someone tries to draw $1500 out of my account. When they couldn't they tried again the same day for $500. And again in a week !
They hacked a verified users account to do this and I wonder how many they got away with? Luckily most of us do not keep much in those accounts but it's unnerving and a nuisance to have to close your bank account and credit card and get new ones.
Mine was dumb but yours was stupid. A Lear Jet yet? Sounds like young people fooling around just to see if they can.
|
gingersnapp
|
posted on July 6, 2002 11:40:18 AM new
Update:
Just found out that a customer has sent a money order to this guy for an auction that ended on the 4th and I had just sent an end of auction email this morning to her. Got an email back that said:
okay.something`s wrong.i`ve already mailed a moneyorder to:
xxx xxxxx
x xxx xxxx xxx
tronto ontario
M3M 2Y2
i think somebody has ripped me off.
Now I have the guy's name and address if it is real what do I do now?
I called the lady to let her know what was going on and she was going to see if she could cancel the MO.
Is there any place to call to report this fraud?
gingersnapp
|
rarriffle
|
posted on July 6, 2002 02:29:00 PM new
You should call the police in the town where he is and ask to forward all information to them. They can and will investigate something like this.
In the small town where I live there was a mother and 2 teenage sones selling sports cards and beanie babies that they did not have. The total fraud charge was in excess of $25,000. The police investigated and also the FBI because it was considered mail fraud also.
they were arrested and found guilty, mom went to prison and the sons were prosecuted as juveniles.
|
capolady
|
posted on July 6, 2002 05:10:03 PM new
Obviously there are a lot of people in this world with way too much time on their hands!!!!!!!!
|
Libra63
|
posted on July 6, 2002 06:43:05 PM new
Keep us posted. Wow, that buyer sure was fast getting that MO out. Don't you wish all buyers were like that.
How did you happen to send out the WBN to this buyer when someone else stole your account? Did eBay send you an EOA notice or did you just go into your closed auctions and find it? Is there still a Safe Harbour? if so I would send them the information also.
Good Luck.
There are crooks everywhere. Nothing is sacred any more. We are in a world where we have to watch our backs all the time.
|
feistyone
|
posted on July 6, 2002 07:04:31 PM new
How did you happen to send out the WBN to this buyer when someone else stole your account?
That's an interesting question. Did this person bid on one of your other auctions and you sent her a WBN?
Finer Fashions on Ebay, top designers, latest styles.
http://members.ebay.com/aboutme/feistyone/
[ edited by feistyone on Jul 6, 2002 07:08 PM ]
|
gingersnapp
|
posted on July 6, 2002 10:03:41 PM new
I assume a WBN is a winning bidder notice? I got all my auctions back when my account was returned to me along with those auctions that had closed before and after the hijacking. The bidder had been contacted by the hijacker and had sent the MO to him before getting my end of auction email.
The account was taken over for 12 to 14 hours before being returned by ebay.
On a side note my son found out that the name of the hijacker had an ebay user id (the same name) that had been suspended it had no feedback.
Also something I forgot to mention that I thought was weird. On the morning I awoke to find the high ticket items I was selling a bidder on the computer that was selling for so much user id was "account hijacked do not bid" at the time I thought ebay was on to what was going on but when I talked to the guy who called he said it was someone unconnected to ebay who watches for things like this to warn unsuspecting bidders. I wonder how someone could know that this had happened?
|
caffeitalia
|
posted on July 6, 2002 10:36:10 PM new
That is the main problem with automated WBN's. You have no control from fraud and offer no protection to the buyers. I would report it to everyone you can think of. Your police, the police in the losers town, the FBI, the post office, attorney generals office and anyone else I can think of. Then hope and pray the one of those agencies actually does something about it. Then I would change my ID on Ebay and password as well.
|
feistyone
|
posted on July 7, 2002 12:57:41 AM new
he said it was someone unconnected to ebay who watches for things like this to warn unsuspecting bidders. I wonder how someone could know that this had happened?
Do you normally sell computers and jets? By looking at your history (feedback, etc), it would be easy to tell that the activity on your account was unusual.
Finer Fashions on Ebay, top designers, latest styles.
http://members.ebay.com/aboutme/feistyone/
|