PayPal Hacked

Is this a FP? FUD or what? Anybody know?

http://threatpost.com/en_us/blogs/paypal-credentials-sale-access-offered-proxy-server-022013

 

Dancho Danchev is very well known so I would say yes.

http://blog.webroot.com/2013/02/20/...access-to-hundreds-of-hacked-paypal-accounts/

TH

 

Looks like individual accounts are hacked, as opposed to Paypal itself being compromised?

That said... From my own experience, it wouldn't surprise me if Paypal (and many other companies) were not entirely on their toes.

 

1) IF PayPal itself was/is NOT compromised then how did these accounts get exposed and put up for sale by the crook?

2) If it was NOT compromised by a hack THEN it must be a bad employee at PayPal who decided to go into business on the side

Well?

 

3) Spear and other phishing
4) Malware
5) etc.

 

Hi Cundni:

Rats! you are helping Gullible Jones with the skill testing question


Now we need to know which malware this was/is!

Would you say it may be prudent to change our PayPal password? Like today?

 

I think you were being facetious, but in case not...

[MOVE]YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. YES. [/MOVE]

Change them all, especially if you used the same password anywhere else.

 

Yes, the PayPal Key only cost $5.

Best regards,

 

This feels far more likely than anything else. Caveat: I know nothing of the case except what I've read in this thread and the link in the first post.


As far as changing passwords is concerned, sure, you can do that. But before you do that, it's worth realizing that every single day, someone, somewhere, is selling or otherwise abusing someone's PayPal account for criminal purposes. It just doesn't make the news most of the time. So, the point is, you'd be changing your password every day, if that was the reason. More than once a day.

 

PayPal seems to be just another of many of late to fall victim to hacks, cracks and Java exploits.

 

Hey Pete, I'm new to PayPal... what the blank is a fob?

 

Did i read it wrong or it says only british accounts were hacked?

 

I imagine it's like the one i have for my bank. The one i have generates unique codes, these need to be entered, when logging on. If the code you enter is not one linked yo your fob, you get locked out. So without the fob, you are not going to get in

I just logged onto paypal, and inquired about the key, it was £ 20 ( $ 30 )
Anyhow, i changed my password, and added my mobile phone as a security key.
They text you a code which lasts for 5 minutes, you need the code to log on

 

My and my wife account are in USA, each fob cost us $5, that was about ten years ago. Same thing is sold by Bank of America and looks like a credit/debit card and we bought it for $15. The PayPal one is like a device but the Bank of America can be carried in a wallet like a credit/debit card.

Best regards,

 

It seems now that they have a credit size security key like Bank of America for $30.

 

Wait, I can't buy another one of those little tokens anymore? Now I have to spend $30 and get something that goes in a wallet? I like the key chain thing, and I hope mine lasts for a while.

 

My and my wife's looks like this. It is about 1/4 inch thick but very sturdy.

Best regards,