Powered by Bravenet Bravenet Blog

8.08.07

04:32:59

Are There ebaY Insiders Helping the Hackers?

I just did a couple quick searches to post, in particular looking for cy77web@gmail.com, as that address has been used quite a few more times to hijack listings in the last few days. Again, that can be verified as a hackers known address independently all over. Here for example

ebaY sellers redzombie24, along with motostuff1 and premiumticketsplus (most likley others too) were all hijacked.

Screencaps:
redzombie24
motostuff1
premiumticketsplus
(if these links get broken, bear with me as I get this storage set-up properly folks)

Well now, moving along... I noticed this conversation begin the other day on the Yahoo Finance ebay message discussion board. (I did alert some folks to it, presenting it as interesting rumour).

I came across the report again, which had grown. It is time to try and shed a little light onto this.

eBay Hackers bragging...

screencapture of entire thread

Here is the text of the original post:

I have just received interesting info on a professional eBay scam ring.

The scammer identified himself as a 17 year old.

He has been professionally scamming on eBay for 2 years.

Professionally scamming means purchasing eBay seller logins and passwords from eBay phishers, utilizing stolen credit cards and posting high end auctions on eBay (those items do not exist, they are just copied auctions) for the sole purpose of conning eBay shoppers into wiring payments for cars/electronics/bikes/tractors/machines that will never arrive.

This individual works in a group of dozen professional scammers/hackers... full time. He claims he knows of at least 500 other full time eBay scammers.

They each have 30 or 40 auctions on hijacked seller accounts running at all times.

Now here is the juicy part:

He disclosed that they have people on the INSIDE eBay offices. The paid insiders feed them information about how eBay fraud filters work.

He described the current eBay fraud filters as follows:

- eBay mainly relies on eBay users reporting fraudulent auctions

- as soon as auction is indexed and passes the first level of automated fraud filters, sometimes within a first minute it is already reported by eBay members to a fraud dept. Once the fraud auction is reported by at least X_NUMBER of eBay members, it is moved to eBay automated software to be analyzed. The software then deletes about 50% of those fraud auctions. The remaining balance of auctions need to collect yet more member reports, then it would go for a human review.

- the eBay insiders feed the scam ring information about internals of the fraud dept and thus the scammers continue to successfully evade such filters.

I hope this is not true! As I mentioned, this information came from a professional eBay scammer and there is no way of verifying it. It does perplex me, however, that eBay scammers have been running rings around eBay security dept. (eBay security dept boasts 2000 employees worldwide)

Here is a link to recently published photos and communication of an UNRELATED eBay scammer. There are hundreds of them. Most are teenagers.

http://www.dslreports.com/shownews/Lets-...
There are certainly plenty of scam auctions on eBay right now,
usually asking unsuspecting buyers to email to some disposable free email address, like To be able to bid on this auction you must contact the seller first: cy77web@gmail.com http://www.companyexposed.com/searchterm...

Well now...That would not surprise me in the least. Nor should it surprise anyone. Others have made similar observations. Fact is, ebay stands to profit. This hack attack makes ebay very happy.
They are rolling in the dough as untold numbers of innocent consumers & merchants are being scammed, and since they are "just a venue",  all the blatant fraud is legal with no more than a catch phrase.

   After documenting some 75-80 live hijackings and/or exploits on video, including the episodes where items were listed at rapid speed, into over 30K items within a few minutes, and appearing within a minute or two of being listed, bypassing the alleged "fraud filters" or whether the same email address was used time and time again, or the times when the listings were allowed to run to completion... Need I go on?

  There is definitely something wrong.  Verrry wrong. Either the hackers can override manually of whatever ebay has to stop them, be it via coding skills or via insider complicity, either would explain what we have observed.

  All this sort of thing is really documented much much better at ebaymotorssucks.com and companyexposed.com. I believe I read at one of those sites they had run or were running out of room to archive the fraud. I wonder how many terabytes it would take to contain it all?

Somehow, even with all the laughs  we must all have gotten from ebay & those kooky hackers, I stop real quick when I see a report like the above. To tell the truth, I am not all that shocked.

   I hope the hackers come back to tell more. We already knew that ebay was the villain of the story, just not all  the ways.

  OK, rambling &  running short on time here. I will be back.





http://budmalcolm.bravejournal.com/entry/23800

0 comments spam filtered.

There are no comments to this entry.

Post New Comment

No Smilies More Smilies »
Please type the letters you see