There is no disputing that a hacker who goes by the name Vladuz has at the very least become a public nuisance to eBay. But some observers think the hacks Vladuz has pulled off reveal a much deeper problem at the auction giant.
Vladuz claims to have broken into eBay’s computers, imperiling the integrity of auction site’s entire system of buying and selling. And the hacker has provided some evidence, last week posting messages to eBay's Web site while posing as employees of the site.
Vladuz demonstrated the hack by posting notes on the customer service bulletin board using the same bold pink background used by actual eBay employees.
Vladuz, who is believed to be Romanian, taunted the company in one of the notes. In response to a post where eBay spokesman Hani Durzy said that Vladuz didn’t have access to eBay’s internal systems, the hacker wrote: “Durzy … lies all the time.” Later, responding to a complaint that Vladuz had been tardy with a reply, the hacker wrote “I was very busy. Being hunted by eBay doesn’t leave you much free time.”
The Vladuz incident comes amid what some longtime eBay observers say is a sharp spike in account hijacking on the site. In “hijacking,” a trusted seller’s account is taken over and buyers are tricked into handing over money for nonexistent auction wins. EBay denies account takeovers have increased recently.
Adding to the intrigue: The reported spike occurred shortly after eBay instituted broad new anti-counterfeit measures. The new rules, which sharply limit cross-border selling, are aimed largely at Asian- and Eastern European-based con artists who sell fake jewelry and other high-ticket items. EBay observers say the rule changes have forced those con artists to find more creative ways to sell their knock-offs on the site, such as impersonating U.S. sellers.
'Tracking him very closely' EBay officials deny Vladuz has infiltrated any of its critical systems, and say fraud remains a tiny fraction of the million or so transactions the firm facilitates each day. But they acknowledge Vladuz is on their radar.
"We are tracking him very closely," said company spokeswoman Catherine England. "We are working closely with Romanian law enforcement. ... He's a well-known fraudster there."
EBay concedes that Vladuz’s attacks are noteworthy. The company confirms, for example, that Vladuz was able to pose as a customer service agent on site bulletin boards during late February after stealing agent login codes. But England said Vladuz's hacking stopped there.
"Vladuz did not get into our site, or into customer accounts," she said. "Our corporate e-mail system operates on an entirely different system. ... At no point did he have access to any of our corporate tools, and no user information has been exposed."
Attempts to contact Vladuz at the many e-mail addresses the hacker has left around the Internet were unsuccessful.
The bulletin board incident is not the first time Vladuz has taunted eBay. Earlier this year, he posted on a hacker Web site a screen shot that he said was from eBay's internal computer systems. The image appeared to show about 30 names, email accounts, and passwords for eBay employees, displayed in what looked like an employee database tool. The e-mail addresses listed on the image all ended in “eBay.com,” as do regular eBay employee e-mails.
Atop the screen shot, Vladuz scrawled his name in big letters, using the computer equivalent of a purple crayon.
Just a stolen e-mail attachment, eBay says England confirmed that eBay was aware of that incident, but said it did not indicate that Vladuz had gained access to any employee database. Rather, she said, it was a screen shot stolen from an employee's customer support e-mail account. She said that the e-mail account that had been accessed was not part of eBay's internal, corporate e-mail system.
England said she did not know how Vladuz obtained access on either occasion, but said the hacker is a skilled identity thief and long-time eBay "phisher" – a crook who sends out fake e-mail to eBay users intending to trick them into divulging personal information. Customer service agents might have fallen for such phishing, too, and responded with information for their e-mail accounts, she theorized.
England said she believed the recent taunting episodes were a function of Vladuz's frustration after many of his "most profitable" schemes were foiled by stepped-up security. Vladuz "took it personally" and set about to embarrass the company, she said.
Online auction activist Rosalinda Baldwin doesn’t believe Vladuz’s hacking is just a prank, however. She thinks Vladuz has provided plenty of proof that the hacker -- or the organization behind the name -- has managed to penetrate deep into eBay's computer systems.
"What level of access does this guy need to convince someone that he has a free hand?" she said.
Baldwin, who closely tracks fraudulent activity on the site, said she's seen a sharp rise in fake auctions in recent months. Scammers seem to be able to post fraudulent listings, impersonating legitimate sellers, faster than eBay can remove them, she said.
"Even if eBay ends them, they are re-listed within an hour or so," she said. The only logical answer, she argued, is that someone can raid eBay identities at will.
In some cases, hijacked accounts observed by MSNBC.com appeared to follow a sequential order, as if plucked from an ordered database.
England disputed Baldwin's assertion that a hacker or hackers gained access to the company’s computers, saying that phishing schemes remain very successful and provide criminals with a ready supply of eBay logins. She also said automated phishing tools have become are so sophisticated that they appear to be capable of stealing accounts in sequential order.
'Something changed' Baldwin and others who follow eBay fraud closely find that explanation hard to believe. Genie Livingstone, who runs Internet host Dotyou.Com, said there has been a recent spike in fraud on eBay so large that something else must be going on.
"The scammers seem to have unlimited supply of eBay user IDs and passwords ... but in February the numbers of hijacked sellers increased exponentially," she said. "Something changed. There seems to be an unusual availability of stolen eBay user IDs and passwords."
Baldwin and others say the crackdown on the sale of counterfeit goods provides the most likely explanation for the surge.
Counterfeiting -- of coins, purses, jewelry, stamps and many other items -- has long been a problem on the site. Two years ago, Tiffany & Co. sued eBay over the prevalence of counterfeit Tiffany items for sale on eBay.
Recently, eBay took a serious swipe at the trade in fake goods -- at least trade from overseas to U.S. sellers. In late December, England said, the Web site began limiting cross-border auctions on certain items where incidence of counterfeiting is high. The firm has not published a list of these items, so as to not tip off the con artists, she said, but sellers in China or Romania can no longer trade certain items with buyers in the U.S.
England denied there is any connection between the anti-counterfeiting steps and Vladuz’s incursion or account takeovers, and said that eBay fraud fighters have spotted no increase in the latter.
But Baldwin insisted the connection is obvious. Beginning in late December, for example, she began chronicling thousands of daily fake auctions involving counterfeit clothing under the popular brand name BAPE. She has showed MSNBC hundreds of DVD movie auctions that were obvious fakes.
"Can anyone believe that counterfeiters using phished accounts could list this many items, using all new accounts each time, three or four times a day? Day after day?" she said. "There are thousands of them ... EBay is completely at the mercy of the scammers.”
-- Edited by anonymous at 09:09, 2007-03-02
__________________
CAPP Consumers Against PayPal Policies - Exposing the sleazery of sleazebay and painpal
Yes, our little BORED troll did say that. Where is he! Just when you want to make fun of him, for being so clueless, he bolts. Maybe Slandy can find him and send him over to us, for a lively debate on the security of e-bay. OH BORED Told you Anon was ALWAYS RIGHT.
IceBlueEyes wrote: Just when you want to make fun of him, for being so clueless, he bolts.
The only reply you can make is one with name calling and cutesy icon text. Trying to debate you is like trying to debate a child. Totally pointless and futile. You don't want my observations or counter-point. You're too hung up on paranoid conspiracy theories, and child like behavior.
I might be bored, but there comes a limit on wasting my time.
A little cranky today bored??? Watch out, Vlad might get you. You really should apologize to Anon. Looks like you were wrong again. And I've tried to debate with you, but you keep running away! Lets do it:
How do feel about Lieworld employees being involved in auction interference eg, Slutty's admission that she interfered in CCorn's auctions. You go first.
One of these days when you IDIOTS learn some respect and humility, and quit treating folks like sh#t, maybe life will get easier. I will hafta say _at least_ one thing positive for Vladuz; he has validated everything we have been saying for sooooo long. He has shown sleazebay for the LIARIT is! (and he has good taste in youtube videos )
Psssst... really_bored LOSER, do you feel that Vladuz may be some sort of real, true-life urban legend, or (gasp), cult leader?
Do you get the idea all those whore auctions are a message, dummyf*&ck?
AAAAAAHHHHHHH!!! LIFE IS GOOD!!!
(EDITED)
mu-ahahahahahahahahahahahahahaha!!!
-
-- Edited by anonymous at 20:56, 2007-03-02
__________________
CAPP Consumers Against PayPal Policies - Exposing the sleazery of sleazebay and painpal
Poor Bored, he can't debate this issue right now, he's trying to dislodge his foot from his mouth. I thought for sure his mouth was PLENTY big enough to accommodate that foot, but............... I wonder if it would fit up......................?
I get the idea that maybe some of these folks do not have a sense of humour.
For instance, calling hapless consumers liars, whinners, and thieves on a censored forum seems as though funny to some of them, yet being BUSTED, DEAD IN THE RIGHTS, for the WORLD to see, in a free-speech environment is not funny...
Then there is that auction interference thing too.
Imagine all that...
-- Edited by anonymous at 20:26, 2007-03-08
__________________
CAPP Consumers Against PayPal Policies - Exposing the sleazery of sleazebay and painpal
Wow! This is a heavy thread with interesting news. Looks like the walls are caving in on eBaY and they will soon have some 'splaining to do.
Lots of good people are starting to wonder why eBay was even allowed to buy Paypal too. Guess the Banking Commissioner will be shaking his head about that deal too, soon. lol
Oh well, does Paypal still have that ONE good employee they used to have named "Tony Ward?" Now there's a dude who rocked! He probably got to smart for his britches and was "fired" or "walked" --lol
__________________
“There is a destiny that makes us all brothers: None goes his way alone.
What we put into the lives of others,
comes back into our own.”--Edwin Markham
Page 1 of 1 sorted by
CAPP -> CAPP -> How far has 'Vladuz' hacked into eBay? MSNBC NEWS