Paypal Theft!

  • Thread starter Thread starter Aod
  • Start date Start date
fluff said:
Phished/keylogged, always.
Click to expand...

I'm in the field of IT security (Digital forensics and systems security to be precise) - I've never been caught out by a phishing scam unless a previously-legitimate website has been hacked/gone naughty and intercepted my PP-login details while i was making a payment at some point.

I only log into paypal from my computers and my computers are clean and keylogger free.

it's a Mystery without a doubt.

weringo said:
What on earth are you doing with a balance sitting in your Paypal account? The few infrequent times I am unfortunate enough to deal with that company I don't leave a single penny sitting in there for more than 30 seconds.

Furthermore you should only have a credit card linked to the account with no direct debit set up with your bank, thus if ever a problem like this arises you can just call the CC company and have the money back hassle free.
Click to expand...

i had the balance in my account as i returned something and the money was refunded there. i was planning to buy something else of a similar value and didn't want the hassle of depositing it into my account, waiting the x-many days it would take to arrive, then probably having to get it out the account again.

That said, the thing i was going to buy is no longer available so i might as well deposit it at this point.
 
Last edited:
quackers said:
How exactly do they manage to get money? I mean if someone has a decent password, hasn't clicked on any random phising emails and you're not selling anything at the moment.
Click to expand...

Keylogger?

Saying that however, someone accessed my ebay account without knowing the password, my paypal account using the same password was untouched so they couldn't have known it.
 
Last edited:
Energize said:
Keylogger?

Saying that however, someone accessed my ebay account without knowing the password, my paypal account using the same password was untouched so they couldn't have known it.
Click to expand...

stuff like that is possible but then we're getting into the (complex) realm of things like session hijacking.
 
uvarvu said:
SMS Security Key incase anyone else wants to sign up!
Click to expand...

Everybody realises this is useless right ?

To log in you just click the "i have lost my security token" link and answer two of your random security questions and it lets you in.

I'm guessing if they can hack his account to get his password they also had his security answers too.
 
Aod said:
stuff like that is possible but then we're getting into the (complex) realm of things like session hijacking.
Click to expand...

With ebay's lax security I wouldn't be surprised if someone hacked into their database and changed the password hash allowing them to login with a different password.
 
MrLOL said:
Everybody realises this is useless right ?

To log in you just click the "i have lost my security token" link and answer two of your random security questions and it lets you in.

I'm guessing if they can hack his account to get his password they also had his security answers too.
Click to expand...

that's why when my proper token-thingy arrives i'm going to change the answers to my "security questions" (aka gaping backdoor) to some randomly generated gibberish.

until then, the Text-messaging service isn't reliable enough... :mad:

Energize said:
With ebay's lax security I wouldn't be surprised if someone hacked into their database and changed the password hash allowing them to login with a different password.
Click to expand...

possible, but if that were the case then I wouldn't have been able to login afterwards...
 
Thats the sort of espionage action i'd expect to see if they were stealing like, £100,000, not £90 :p
 
Aod said:
I'm in the field of IT security (Digital forensics and systems security to be precise) - I've never been caught out by a phishing scam unless a previously-legitimate website has been hacked/gone naughty and intercepted my PP-login details while i was making a payment at some point.

I only log into paypal from my computers and my computers are clean and keylogger free.

it's a Mystery without a doubt.
Click to expand...

First time for everything! ;)

I srsly doubt it's a mystery, you just slipped up, embarrassing but it happens!

Energize said:
With ebay's lax security I wouldn't be surprised if someone hacked into their database and changed the password hash allowing them to login with a different password.
Click to expand...

:rolleyes::rolleyes::rolleyes:
 
weringo said:
What on earth are you doing with a balance sitting in your Paypal account? The few infrequent times I am unfortunate enough to deal with that company I don't leave a single penny sitting in there for more than 30 seconds.

Furthermore you should only have a credit card linked to the account with no direct debit set up with your bank, thus if ever a problem like this arises you can just call the CC company and have the money back hassle free.
Click to expand...

totally agree...if you need to you can link your debit card via paypal to pay for stuff...I never leave more than £10 in my paypal account...any money always goes straight back into my normal bank account
 
You must log in or register to reply here.
Back
Top Bottom