Account hacked multiple times

[09823852]

The security questions they ask are from a generic database they pull up. They are the same questions a bank would ask you for example.

Which of the following addresses have you been associated with.
Which of the following cars have you owned.
Which of the following companies have you been associated with.
What age range is your father in

These are not questions that I set up, Ebay is just pulling them from a database somewhere unfortunately.

Klemantina, I understand what you are saying but the issue does not seem to be related to us. The first two times it happened we beefed up our passwords, firewall, scanned through all our computers, started changing the password daily, etc and they are still getting in and it was not until we got this chat transcript that we figured out how they are doing it.

I was hoping someone knew of a third party extension for Ebay that was security related or some setting with Ebay they would let you do. Everyone we have spoken with there is like "this has never happened before" I would not worry about it. It keeps happening though.

Anyways, thanks all for your suggestions. Ill keep looking

[oompaloompa]

my personal experience - I do not believe a password reset can be happening by phone without access to the email.

I have never been asked the personal questions - just username, email, address, and sometimes phone.

this is for Uk and europe.

I can understand 1 slip-up by a rep, but not alot of times.

I have called a handful of times over the years. I have had to talk my way out of not knowing card for paypal (virtual) and not having access to phone for ebay (lapsed) but if I did not have access to the email then there is no way they would have allowed me to reset a password for ebay or paypal, they send you a link, you can ring as many times as you want, but this is the minimum requirement.

chat used to be more slack, but not anymore, they ask you to call.

lets be cautious that this is not a hacker looking for info.....

[Klemantina]

Originally Posted by 09823852

The security questions they ask are from a generic database they pull up. They are the same questions a bank would ask you for example.

Which of the following addresses have you been associated with.
Which of the following cars have you owned.
Which of the following companies have you been associated with.
What age range is your father in

These are not questions that I set up, Ebay is just pulling them from a database somewhere unfortunately.

Klemantina, I understand what you are saying but the issue does not seem to be related to us. The first two times it happened we beefed up our passwords, firewall, scanned through all our computers, started changing the password daily, etc and they are still getting in and it was not until we got this chat transcript that we figured out how they are doing it.

I was hoping someone knew of a third party extension for Ebay that was security related or some setting with Ebay they would let you do. Everyone we have spoken with there is like "this has never happened before" I would not worry about it. It keeps happening though.

Anyways, thanks all for your suggestions. Ill keep looking

Firewall, daily password change and you still getting easily hacked? If i were you I would search an expert to analyse what i'm doing wrong and also try contact people with the same selling volume, preferably from the same niche and ask them if they got the same problem and how they solve it.

[09823852]

Klemantina, thanks for the thoughts. I will try and get with a competitor and see if they have any information but more than likely it might be one of them.

They are basically just changing our listing prices to 50% of the normal price and then putting in an "email me" at this email for a better deal and asking people to WU or Wire them. Just so frustrating because I know they are making maybe $400 each time and causes us a tremendous amount of issues and money. I just wish he would contact me and I could just pay him $400 a month to leave me alone, haha.

[BigCJ]

I would call in and tell the rep to add a PIN number on your account that only you know and can verify.

The rep MUST ask for that PIN number in order to change anything. Chat OR phone

I am so sorry you're going through this.

[Heshl]

There is an option to creat a telephone pin and secret question. Go to my eBay > Account > Persunal (or Bussiness) information > Account information > Create

Can't believe you overlooked that!

[Ar3s]

OP please don't misunderstand but is it possible that some former employee with access to your email account might have done that?

If you really can exclude that get in touch with OffSec I'm quite sure they can workout a custom solution with you. And if they can't help you they for sure know someone who can.

[peterspike]

If you are still having problems let me know I am a security expert and can find the problem for you via team-viewer and remove it if it is a keylogger or RAT.

[09823852]

Thanks Heshl and Ar3s, I will try that in the AM.

After all the hours on the phones with Ebay customer support I have asked them everytime if there is a way to get a keylogger, put a block on changing the email, special pin, or code and all 5-6 people have always said there was nothing additional they can do so I hope this works!

[09823852]

Ok, I was not aware but we did actually have a telephone pin and secret question set up already Ebay is just not asking it. I don't know if this guy is just calling again and again until he gets someone that he can manipulate into changing the information or what is happening.

Does anyone know if Paypal still have keygenerators cards? I see information for them on the paypal website but I cannot figure out for the life of me how to order one. I kind of vaguely remember at one point having one and being able to link it to Ebay. Does anyone do this or have one of these? I dont know if this would help at all since he is just changing the email but figured one more thing could not hurt.

Everytime we call Ebay and complain about it they just say that it could not have happened and no one would do that without the proper information blah blah blah and then we show them the chat history and they just say it will never happen again. Guess what, just got hacked again on Friday and on Sunday a week ago.

I am at a complete loss. I can't imagine it being a keylogger, if so why would they not clear out our paypal accounts or anything like that. The guy is trying to be more stealthy, last time he did not change the password just added to all the listings, "Email me at ___ for a better deal" but left the email and password the same.