I just tried to log in to my eBay account and it locked me out! Then I noticed a 'eBay Change Email Notice' email acknowledging my request (which I didn't send.

Does anyone know what a theif can do with my eBay identity? Is it just a malicious to$$er or should I be worried??

HELP!

search for items for sale in your name (i think its under the community tab). If anything is being sold, you must act quickly. In fact, act quickly anyway! Search through under the security section for the correct links, ebay are apparently vrey prompt in this area. Someone will be along soon who knows the exact link and procedure. Dont panic!

Click this link:

http://pages.ebay.co.uk/help/confidence/problems-account-theft.html

or

http://pages.ebay.co.uk/safetycentre/?ssPageName=f:f:UK

And follow the links through that you need.

eBay are pretty speedy at sorting this stuff.

David

[Edited on 21/2/06 by flak monkey]

Just checked any items for sale (there are none)

I have emailed eBay security via their account theft menu so hopefully they can freeze the account until it is resolved.

I feel violated - its the first time anything like this has happened to me. I had a suspicion that something was wrong last week. I downloaded an eBay toolbar and when I installed it ran a program called 'pinch.exe' I think it may have nicked my identity details then.

http://cgi4.ebay.co.uk/ws/eBayISAPI.dll?ForgotYourPasswordShow

quote:

---

Originally posted by JoelP
http://cgi4.ebay.co.uk/ws/eBayISAPI.dll?ForgotYourPasswordShow

---

I just noticed this on the eBay email

Change of email address request was made from:
IP Address: 172.216.196.63 - ISP Host: 172.216.196.63

Can I do anything with this info?

Not a huge amount really no. DPA prevents you finding out all the details. The address is registered to AOL though. Infact, that IP comes back AS AOL oddly.

http://www.geobytes.com/IpLocator.htm?GetLocation

David

[Edited on 21/2/06 by flak monkey]

Is an AOL address..

OrgName: America Online
OrgID: AOL
Address: 22000 AOL Way
City: Dulles
StateProv: VA
PostalCode: 20166
Country: US

NetRange: 172.192.0.0 - 172.216.255.255
CIDR: 172.192.0.0/12, 172.208.0.0/13, 172.216.0.0/16
NetName: AOL-172BLK-2
NetHandle: NET-172-192-0-0-1
Parent: NET-172-0-0-0-0
NetType: Direct Allocation
NameServer: DAHA-01.NS.AOL.COM
NameServer: DAHA-02.NS.AOL.COM
NameServer: DAHA-07.NS.AOL.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2002-02-13
Updated: 2004-12-22

RTechHandle: AOL-NOC-ARIN
RTechName: America Online, Inc.
RTechPhone: +1-703-265-4670
RTechEmail: domains@aol.net

OrgAbuseHandle: AOL382-ARIN
OrgAbuseName: Abuse
OrgAbusePhone: +1-703-265-4670
OrgAbuseEmail: abuse@aol.net

OrgNOCHandle: AOL236-ARIN
OrgNOCName: NOC
OrgNOCPhone: +1-703-265-4670
OrgNOCEmail: noc@aol.net

OrgTechHandle: AOL-NOC-ARIN
OrgTechName: America Online, Inc.
OrgTechPhone: +1-703-265-4670
OrgTechEmail: domains@aol.net

# ARIN WHOIS database, last updated 2006-02-20 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

The plot thickens.......... strange that it comes up as an AOL address.

Somehow (don't ask me how) I managed to log in to my eBay profile. It has a different email address registered (it is a yahoo.com account)

I will email eBay's security dept again with this info and wait.

The little scrote has started buying stuff on my account now!!

He has bought 2 PDA's totalling £380 and paying with Paypal - but not mine.

I have contacted the sellers and explained the situation. It is all a bit confusing really - why would anyone BUY stuff on my eBay account and pay with Paypal? Unless he has hacked into someone else's Paypal account.

Where did yuo get the toolbar from that you downloaded?

I thought I was downloading something else from a Bit Torrent site. It turned out to be a a file called 'Ebay' and I stupidly clicked on it. I think a program called 'pinch.exe' was executed (I have since deleted it) and a search on Google revealed that this is an 'information stealer'.

Luckily I was logged into eBay while my account was being hacked or I wouldn't have discovered that he had added an address to my profile and purchased two PDA's which were to be sent to this new address (a carpet shop in East Ham )

I am still waiting for a response from eBay.

Update:

eBay have now reset my account so all is well ......... phew!

Thanks for all the help guys

[Edited on 22-2-06 by RazMan]

So where exactly is this carpet shop in East Ham?

Could have been funny to play the scammer at their own game. Bit like the bloke in america who scammed the scammer trying to buy a laptop off him using a dodgy pay site. In the end he sent a box containing a folder with a some computer keys stuck to it. The scammer then thought he had got a laptop and just had to pay the import tax. He ended up paying for load of rubbish!

6 Hennibert Gardens, E6 3JG.

I am not sure what this guy was trying to do. He might have got my eBay details mixed with someone else's Paypal details and put the two together to do the scam - a bit daft if that is his home address but somehow I doubt it.

Anyway, I will leave it in eBay's hands - they sound as if they know what to do.

Perhaps a lesson to be learned by all... DONT TRUST anything, you download from peer to peer sites.

Get tool bars etc from the genuine sites not anywhere else.

Glad you got it sorted out.

Make sure you have got rid of that prog or you will have the problem back again.
Check with some decent anti spyware that its not still active, ie a key logger, and is taking off ALL your banking details etc etc etc.

Regards
Geoff

E6 3JG is Henniker Gardens, East Ham

quote:

---

Originally posted by jack trolley
E6 3JG is Henniker Gardens, East Ham

---