how did they hack into my paypal account

[Nosha123]

some B******* has hacked into my work email address and then got into Paypal account and made a transaction for �265.00

Paypal have queried it immediately and emailed me to say so.. I also got emailed the receipt.

How did this happen> We have a firewall - but Paypal say it is not their system that was hacked into and that they can see the hacker got into paypal VIA my work email address.

I wil get the money back.. but it worries me how it was done. A few years ago my ebay account also got hacked into so I closed my paypal as the two are closely linked. Then I opened a new paypal when I needed it.

Their advice: Dont use a work email address and change your password every month! Please be warned!!!

[Uzoma]

If you use your work email or PC to access your paypal account, it is possible that a contraption could be put on your keyboard to record all of your keystrokes. This could be put in overnight (by a cleaner for example). This would record all of the things that you type in.

[Nosha123]

no.. its a small company... only 15 of us.. not a big corporation.. and the cleaner isnt the brightest tool in the box! Plus we run macs here so not supposed to be as easy to hack into or transfer virus too - not like PC's.

Could they have done it externally? maybe diverted an email with my password??

Also - I dont use my paypal account.. so havent logged into it for ages!!!

[stefos]

The same thing happened to me a couple of months back and fortunately I was at the computer here as the transactions came through, two in quick succession amounting to over �400. So I immediately stopped it going ahead and PayPal froze my account until they sent me a letter with a new password. I asked on the eBay community forum how this could have happened and the consensus was that I must have given someone the password which I know wasn't so as I couldn't remember it myself! I even e-mailed the two people who were selling the items to ask for details of the purchaser (who was using my account) but I didn't receive a reply. PayPal didn't seem to pursue the matter any more either.

[fo3nix]

What are your passwords like?

If you use one password for many things, or even just use a dictionary password, it may be easy to guess.

Here's what I do:

Use a trusted 'password safe' type program. On the Mac, 1Password is very good, but not open source and not free. I use KeePass, which is free and open source, for Windows, Mac and Linux (Mac and Linux use KeepPassX).

This program is a simple database, storing all your passwords for all the websites and programs you use (or anything else you want to keep secret, perhaps serial numbers or bank card details). You lock this program file with a password, which is now the only one you have to remember (so make it very strong, not easy to guess). The program locks all your passwords up very securely, so you can carry it round on a USB flash stick if you want, or just keep it on your computer.

If you need a password, you use the program to unlock all your passwords; it's that simple. The program will also generate passwords for you, which are very secure.

For example, all my passwords are something like "v9v ^%b*^(*R%t8^&RC&". I have no idea what any of my passwords are; I just know the master one. And it's trivial to use different passwords for different systems, so if they somehow guess my email password, they won't have my Paypal password.

Even if you do none of this, there's a very quick idea to take in: think of passphrases, not passwords. If the service (like your email client, or PayPal) allows, use something like "my dad's friend has a purple cat". This is vastly more difficult to crack than "stMark294", and not really any harder to remember. Your brain is also very good at associating weird short stories or phrases like this with particular items. (But the password safe system is even better.)

[redman41]

I am no Computer Geek, but the one thing that springs to mind is Spyware which in all probability has been installed on your Company's Computer system. Why not download Super Anti-Spyware or Spy-Bot (Both Freeware) and do a full Scan to see what is revealed. If the rogue Programme is then revealed, take it from there !

[squarebear]

I assume you haven't filled in any of these scam emails that ask for your account details. They can be very convincing.

[Nosha123]

thanks all.. and no squarebear I dont get duped by those scam phishing emails... though they are quite convincing!!!

[byronhacks]

Buy Hacked PayPal, Bank Logins, WesternUnion, cc topup, cvv, smtp,
rdp, inbox mailer, email leads, dumps, warez, with proofs of
transactions and accounts.I am selling hacked westernunion, hacked paypal
accounts, bank logins, MoneyBookers, CC details/transfer, Hacked iTunes
Accounts, Dumps, warez and full info.All transactions are
offshore and anonymous and has no trace backs or chargebacks.
Contact
[e-mail]
[phone]