Hacked eBay account

[colyn]

Somehow my eBay account was hacked today and the person listed a car for sale. eBay quickly caught it and deleted it but it took me a couple of hours to regain access. Had to change my 3 week old password.

I use a Mac (keyloggers etc have no affect) which is behind 2 firewalls and neither has logged unauthorized access. I do not respond to spoof emails nor do I click any links in them. Nobody has access to my computer and I have not given out any information etc about my personal info. I change passwords every 3 months and use multiple numbers and letters consisting of at least 10 characters.

In other words I use every security measure possible but someone managed to break through.

Anybody have any ideas how it happened?

 

[sepiareverb]

No, but scary. Thanks for the reminder it's time to change my passwords again.

 

[palec]

Maybe the cracker got is inside eBay database. Or breaked into your ISP DNS entries and made eBay site trampoline while catching passwords. Both ways he/she could gain quite a lot of information.

 

[Larky]

It's easier to get it directly from eBay than from your machine. Your two firewalls will stop fairly poor hackers, but will not stop somebody who really wants your details. However, this is probably not the cause here as if they REALLY wanted your details it would have been for something worth more than a fake car ad.

Keyboard loggers DO work on Macs, especially telescopes through the window or if they are really serious, a microwave system of sorts built from Maplin's spare bits pointed at your keyboard.

But again, it's more likely they got it direct from eBay OR you responded to a mail which probably was legit, but still spiked (virii et all don't have to be on your computer to get what they want).

 

[colyn]

Keyboard loggers DO work on Macs, especially telescopes through the window or if they are really serious, a microwave system of sorts built from Maplin's spare bits pointed at your keyboard.

For a key logger to work on a Mac you have to give it access by giving your password for installation unlike a windows machine where it automatically installs when you open an email attachment etc. My computer is clean.

Telescopes won't work either since my computer cannot be seen from any of my windows..

Since the hack was from an overseas IP the microwave system is ruled out..

I have to believe the hack was through eBays system. They were able to post the fake auction but did not have access to my personal information..