QuoVadis Posted December 17, 2018 Report Posted December 17, 2018 (edited) Putin whistle-blowing...share, comment & distribute Vad ca inaptii tac ca "porcul in papusoi" despre treaba asta asa ca postez aici: se pare ca au fost hackuiti si tac in privinta asta. Am aplicatia eBay pe telefon si Sambata dimineata (aproximativ ora 8.30) primesc o notificare de la app ca produsul meu s-a vandut. Nu aveam nimic postat de vanzare si nu folosisem pana atunci eBay-ul de vreo 1-2 luni. A trebuit sa astept pana la 9am sa vorbesc cu cineva de la support si tipa cica "da, stim ca sunt ceva hackeri care fac chestia asta insa se pare a fi automata". A verificat adresa de IP de unde s-a postat produsul si era de Hong Kong. Ce-i mai nasol e ca sunt foarte discreti in treburile astea - nu am primit nici o notificare referitor la schimbarea parolei, ca a fost postat un item nou, ca am vandut ceva nimic - de obicei primesc toate astea prin mail. Daca nu aveam aplicatia pe telefon nu aflam poate nimic, poate doar cand era prea tarziu. Si tipa de la eBay support cica "da, stim ca fac chestia asta, dar nu stim inca cum o fac, se pare a fi un bot care face tranzactii multe si marunte", etc. And the English version - eBay have been hacked and they seem to be keeping quiet about it. I have the eBay app on my phone and on Saturday morning (approx 8.30am) I get a notification from the app that my item has been sold. I did not have any item on sale and have not been using eBay for the past 1-2 months. I had to wait until 9am to ring their support and they were like "yeah, we know there's some hackers who are doing this, seems to be automated". And they checked the IP address from where the listing was made and it was from Hong Kong. But what's more worrying is the stealth with which they've done this - I had no notification of my account changing password, had no notification that an item has been posted for sale, etc. If I wouldn't have had the app on my phone, I would have probably not found about it until too late. And the lady on eBay support on the phone was like "yeah, we know about this, but we don't know how they're doing it, seems to be some bot as they're doing loads of small value transactions", etc. Edited December 17, 2018 by QuoVadis 13 Quote
osirium Posted December 18, 2018 Report Posted December 18, 2018 This is kinda funny tbh. Currently, eBay is running a very expensive BB program with one of the top BB platforms. The scope is very broad and basically, they are trying to cover all their exposed "stuff". Probably someone was able to toast them through one of their third-party acquisitions because eBay as a mother base platform is quite well scrutinised. I will check my account too just to see if anyone was able to add me more positive feedback :) Quote
QuoVadis Posted December 18, 2018 Author Report Posted December 18, 2018 Yeah, but even the fact that whoever pwned eBay, couldn't be bothered yet to do any serious damage and just set up a bot to do lots of small transactions. Maybe one strategy is that they were hoping to go undetected by not being greedy or perhaps testing the capabilities of the vulnerabiliti/es or building up for something larger. What annoyed me more though is that the lady on the phone was like "yeah, we know they're doing this but we don't know how or why". I was like.. well when the fuck are you going to warn people that their financial and personal data are at risk? Why the fuck are you keeping this quiet? I am actually going to raise a complaint with the ICO in here to fine them mofos... 1 Quote
Gushterul Posted December 21, 2018 Report Posted December 21, 2018 Screenshots or didn't happen 1 Quote
QuoVadis Posted December 21, 2018 Author Report Posted December 21, 2018 3 hours ago, Gushterul said: Screenshots or didn't happen Screenshot la convorbire telefonica? Daca vrei iti vand mai bine o sabie cu luneta sau un derulator de cd-uri? 1 1 Quote
ARUBA Posted December 21, 2018 Report Posted December 21, 2018 5 hours ago, QuoVadis said: Screenshot la convorbire telefonica? Daca vrei iti vand mai bine o sabie cu luneta sau un derulator de cd-uri? Un aparat de masurat fps-uri? fps-o-meter? Quote
LXSvAY2bfMAw2WSw Posted December 21, 2018 Report Posted December 21, 2018 10 hours ago, Gushterul said: Screenshots or didn't happen ba du-te ma in pula mea de prost 1 Quote
u0m3 Posted December 22, 2018 Report Posted December 22, 2018 S-a "romanizat" eBay-ul, aparent... Ca aplica de minune principiul "mergi pe burta ca-i apa mica". 1 Quote
popsoniq Posted December 22, 2018 Report Posted December 22, 2018 Ca sa scoata banii din produsul vandut pe contul tau, ar trebui ca acel cineva sa aiba acces si la Paypal. Ori daca are acces la Paypal, scoate direct. Doar daca nu ai contul gol :D Probabil a dat disable la e-mail notifications de n-ai primit nimic. Si indienii de la eBay support nu sunt de nici un ajutor, asa firma, asa angajati. Quote
Gushterul Posted December 25, 2018 Report Posted December 25, 2018 On 12/21/2018 at 1:10 PM, QuoVadis said: Screenshot la convorbire telefonica? Daca vrei iti vand mai bine o sabie cu luneta sau un derulator de cd-uri? La istoricul tranzactiilor "nefacute" pe ebay. Banii s-ar fi dus in contul tau oricum, nu? Quote
