It does much to legitimize tamebay as a blog with a voice for all, rather than make it appear as an ebay mouth-piece to spread and affirm ebay corporate spin.

Now we can all rest easy since the eBay statement yesterday saying, in effect, “the successful hack that happened ages ago that we were denying completely until now wasn’t that bad really and nobody needs to worry.”

Yea I trust ‘em!

A conservative estimate would be that 600 unique sellers account were hi-jacked by this person and have been used so far.

Around 300 unique selling account were discovered hi-jacked on Sunday (18th Feb). Around 100 on Tuesday (20th Feb). Around 200 on Wed (19th Feb, today).

It is clear that the hi-jacker wanted to be caught, he made it simple and made sure that each new ‘wave’ of hi-jacks were linked to previous ones.

I’d assume there is a lot of profit to be made in hi-jacked accounts. Why ‘waste’ (for want of a better word) this many accounts?

Because he is proving a point and playing a game.

How many more accounts does he have?

What will he do with the ones he does not want discovered?

Clearly large-scale. And ebay have been slow to respond.

What eBay is not telling us is, There are a lot of internal redirects leading new and inexperienced site visitors off to look alike sites where “no scam warnings are posted” A newbie will fall into this cleverly baited trap in a new york minute!

Review these articles on how it is being done.
http://www.ebaymotorssucks.com/iiwasp-com-2.htm
http://www.ebaymotorssucks.com/asrcs-com.htm

There are fake sign in links in eBay ME Pages as well. I have seen plenty of them!

When the physhing is Internal On eBay’s Site it’s hard to blame it on the users opening emails and clicking on links!

Another favorite is to list a car with a pornographic photo, clicking on the listing brings up a phony sign in page!

This one had the link code messed up so who ever looked at it got mooned but good!
http://www.ebaymotorssucks.com/danield418.htm

eBay is making $$$ hand over fist.. They need to spend some of it policing and cleaning up their site!

BTW: Appologies for the Sensord Comment. Guess my previous posting was delayed because of the links.

However it defines the word “hacked”, it is apparently excluding the social engineering scams that use embedded javascript within eBay item listings to steal personal data from eBay customers.

1. Users already logged in to eBay are asked to login again when they land on poisoned eBay listings.

2. These users did not respond to phishing emails, and may never have received a single spoof email.

3. The users dutifully login again on what appears to them to be a legitimate eBay login screen.

4. The login screen isn’t eBay’s at all, despite the fact that it was presented to the user from a listing screen within eBay.

5. Because the users are returned to the real eBay site after giving away their ID/passwords, they are unaware they’ve just been robbed.

6. The users later find out, to their dismay, that their eBay accounts (and possibly credit card data and/or paypal accounts) have been hijacked by criminals who got their info while the users were browsing on eBay.

Since this method of identity theft does not depend on eBay being “hacked”, perhaps a new word is needed to define the problem – maybe “scamBayed”?

DOC

I am not a huge fan of eBay as I stopped seller their a while back but I think if people bothered to visit their help pages they would find loads of info on how to minimise the chances of being caught out like this.

A lot of people dont protect their pcs from attack but they wouldnt leave their front doors open would they? We should be as concerned about pc security as we are about our household possessions.

In my opinion this was a phishing exercise, but quite a sophisticated one, which did not involve clicking on, or responding to anything in emails.

I think the most sensible thing anyone who is worried about this, and who has listed a high value item recently (even or especially if it has finished and you are not regularly checking ebay) is to check your pc is free from keystroke loggers and change all your ebay and paypal passwords.

Sure they were not hacked.. Like you expect a sleazy bunch like eBay to tell you the truth??

Look over the recent hacked pages we have captured, and the severity of it. Then tell us it ain’t so..

http://www.ebaymotorssucks.com
http://www.ebaymotorssucks.com/rflello.htm

I ‘watched’ the events unfold, and at its peak there were reports of several hundred auctions (not accounts), some members were frustrated at the ability to only report 10 auctions at a time.

Several hundred accounts would indicate many more than several hundred auctions, this was not the case.