Vladuz the eBay Hacker

mimi · Noob

Vladuz hacked ebay again last night

budnonymous · Top Poster

Hello mimi.
Very surprised to see you here. Scary stuff. Made even worse by the ignoring and denial I am afraid.
I hope you are doing whatever you need to to be safe as possible. BTW.

Here is something I just saw which must be preserved and shared.

That logo looks dangerous. Looks like one of those things that might "stick"

That type of thing could induce some critical thinking, or questioning of authority or something. I would post a screencap of the entire post here, but that looked perhaps even more dangerous.

OMG!!!

You just better let me hang onto to that for you.

LMAO

-- Edited by budnonymous at 19:19, 2007-10-06

budnonymous · Top Poster

AuctionBytes Blog

Hacker Vladuz Accesses eBay Servers, Suspends Accounts

By: Ina Steiner

Sat Oct 6 2007 21:00:40

eBay confirmed that a known fraudster had limited access to a very small number of eBay accounts on the eBay.com site and the company appeared to have reacted quickly to block him on Friday. eBay spokesperson Nichola Sharpe said, "At no point did the fraudster get any access to financial information or other sensitive information." In a strange twist, some users reporting the incident said they had been openly critical of a hacker calling himself Vladuz and had been suspended briefly during the incident.

Vladuz has been targeting eBay for at least 10 months and is believed to have been responsible for last week's posting of approximately 1200 eBay members' names, User IDs and addresses and unmatched credit card numbers to the eBay discussion forums.

The latest drama began unfolding Friday afternoon. One user explained that she received an email that said, "Stop saying sh*t stuff about me, a**hole" signed by vladuz. She tried logging in to the eBay discussion boards and received a message that she was suspended due to seller non-performance issues. (She does not sell on eBay.) She said of Vladuz, "I admit I had been less than complimentary about him on the boards."

Another user said he received an email which quoted something he had written on a board wishing Vladuz would get caught, with the message "Oh ya? f*** you."

Both said the sender wrote from the Google email account, "sgissc19@gmail.com."

Several other eBay users reported a similar incident in which they were unable to log in to the eBay site, though not all of them received an email purporting to be from Vladuz.

One user said his account was back up and running in 30 minutes, another said it was back up in 60 minutes. eBay's Nichola Sharpe said, "We have already secured and restored the affected accounts and are proactively calling the affected users to reassure them that their eBay account is secure."

This is the first time eBay has said that a hacker gained access to user accounts by means other than through phishing techniques. Sharpe said, "The fraudster did this by accessing externally visible servers not by hacking into the eBay site." eBay was not specific about the type of information the servers contained nor who had access to it.

In February, an eBay spokesperson had said of Vladuz, "Our number one priority is to see him caught and locked up." While Sharpe would not confirm Friday's incident was the work of Vladuz, some members seem to have no doubts.

A user who received a message from Vladuz and lost access to his account on Friday wrote to AuctionBytes, "There are so many members who despise eBay, legit reasons or not, that support Vladuz, I do not support what this hacker is doing. I don't care for his/her "stick it to eBay" attitude or the attitude of "attack" mode against members who do not support his combative, destructive behavior."

budnonymous · Top Poster

It seems to me that they knew they needed to "fess up" to something, so they did so to the very least that would even appear to be vaguely possible.

Are advanced priveleges such as the abilty to NARU users also to compose and and/or generate account suspension emails something which can be done via "accessing externally visible servers"?

See, right there they attempt to minimalize it by not using the word "hacking" Do not allow the change of nomenclature deceive you.

"accessing" (without consent and via some sort of manipulative methods) is another term for HACKING.

Also this:
"This is the first time eBay has said that a hacker gained access to user accounts by means other than through phishing techniques."

Again, notice that purposeful lack of use of the "H" word...

Also, just to echo something someone else said waaaay back when in february...

Why is the number 1 priority not fixing the site? (instead of "to see him caught and locked up.")

I doubt they even have a clue as to whoever it actually is to begin with. They have a name and vapor.

I also notice they shunted the snoyce@ebay.com hijacking and about me page change.

V owns ebay, IMO.
He may know more about the site than they do.

Who thinks he will be back?

mimi · Noob

I think he will return. (probably on friday nites, when t/s is shut down) The way I see it he is one of two people. A true old time hacker having fun. Probably home grown, not Romanian. Probably been booted by ebay. Or an ebay employee. I think most of the paypal hacks have been employees. Either way I have a lot of respect for his attention to detail.

In the past I spent a lot of time on warez boards. Many times the old hackers were simply solving mysteries. I might be wrong, but I don't see Vladuz as really targeting the general users of ebay. It seems to be ebay its self. That's why I am leaning towards a home grown hacker that has been booted from ebay. Remember, he posted the ebay pix this spring that showed ebay logging ips, contacts, and items viewed etc. These posts were of great interest to folks that had been booted and were trying to get back on ebay clandestinely.

Ebay these days is like Norton. They are so busy being proprietary and working on making themselves the only one that they let bad code or bad management annoy their loyal customers to tears.

mimi · Noob

feel free to snag that siggie if you like it. I made it.

budnonymous · Top Poster

mimi wrote:

feel free to snag that siggie if you like it. I made it.

Do you mean you made the Vbay logo?

mimi · Noob

That logo looks dangerous. Looks like one of those things that might "stick"
Weren't you speaking of the thorny one I posted on the t/s board? Thats the one I was speaking of.

mimi · Noob

rats! my tags didn't end......... sorry

Cyber Diva · Senior Member

mimi wrote:

I think he will return. (probably on friday nites, when t/s is shut down) The way I see it he is one of two people. A true old time hacker having fun. Probably home grown, not Romanian. Probably been booted by ebay. Or an ebay employee. I think most of the paypal hacks have been employees. Either way I have a lot of respect for his attention to detail.

In the past I spent a lot of time on warez boards. Many times the old hackers were simply solving mysteries. I might be wrong, but I don't see Vladuz as really targeting the general users of ebay. It seems to be ebay its self. That's why I am leaning towards a home grown hacker that has been booted from ebay. Remember, he posted the ebay pix this spring that showed ebay logging ips, contacts, and items viewed etc. These posts were of great interest to folks that had been booted and were trying to get back on ebay clandestinely.

Ebay these days is like Norton. They are so busy being proprietary and working on making themselves the only one that they let bad code or bad management annoy their loyal customers to tears.

Good ideas you have there, Mimi, but I still believe he is part of a more serious Domestic Terrorist Group and not working alone. eBay tries to give out propaganda that he's a "lone" cyber terrorist, but if that were true, he'd be behind bars already.

budnonymous · Top Poster

I read a Romanian article which suggests there may be a $1.5 M bounty or reward for the mystery man.

Maybe ebay should offer a reward. Something like a credit for free listing for a month. They bill your credit card, then 3 months later, you get a credit back as your reward.

Like I said before, they have a name and vapor.

For all we know, it could be anyone.

Hilarious when you think about it.

Ebay may not even have contacted any authorities to help. Has anyone seen any statements indiucating any real LE is on the case? After all, they will have some explaining to do. Lots.

Let's face it. Ebay is toast. Only IDIOTS will use that untrustworthy, weaseling, untruthful blivet.

Anyone remember that tylenol thing? Do you think tylenol would be a good word today if they tried to cover that up?
They shut down completely and made SURE. If ebay had brains intead of greed, they would do the same.

Each time ebay lies and denies, the hacker gets more fans. Regardless even of the apparent personal attack on selected members accounts the other day.
Even if they do not see V as some robin hood, they still dislike dishonest, greedy, fascist ebay.

Aaaaaahhhhhhh! Comedy at IT's finest all

For the want of a nail...

biggrin

-- Edited by budnonymous at 09:56, 2007-10-09

lieworld · Senior Member

Whoever this is.
They are great...

The bay is becoming such a ghost town.

Check the stores board and others.
No one is happy with this sleazy company.
Even all of the true believers are wavering.

I love it.

budnonymous · Top Poster

I will telll you something else. There are still folks out there who are only finding out now that ebay was hacked & all that data dumped.
There are still lots and lots of folks finding out every day.

There are places where the victims are turning up, and YES, regardless of anything sleazebay says, those credit card numbers were real and valid, except for instance the expired cards and so on.

Think about it for a second. Who is going to spend any amount of time to make thousands of "fake credit card numbers"?
Doubtful. That data was all in the same place, or it is retrievable from it's component locations, and/or able to be easily composited with one operation.

Some of the reports are stating the unauthorized use started from the day the numbers were posted.

Other reports are that folks were contacted by their own credit card companies, stating there had been a breach reported, where the only place the cards were registered/used at was ebay/paypal.

Lots of folks can see that sleazebay is hacked & being FAR less than honest.

It will be "funny" when V comes back, with something even more outrageous.

(& I love "comedy")

See that crap about the lady losing around $8.6K and sleazebay washing their hands of responsibilty?

Those sleazy, cheap-a$$, dishonest, cheating idiots need to be taught a lesson.
I betcha someone out there somewhere teaches them one.

lieworld · Senior Member

The big V is the man or woman, and is the talk in those
grass root type circles around the globe I suspect

And ebay, just like they started out with word of mouth.
Is getting it all back the other way now.

Everyone I know that I've talked to about this were and still are, appalled at
the lack of transparency on ebays part to come clean.

As a result, so many are just saying no to ebay.

As usual Bud.. you bring good things to light.
Thanks for your diligence in these areas.
You are the man.

budnonymous · Top Poster

Looks like he is getting to be quite popular. biggrin

Someone over at youtube wants Hollywood to make a Vladuz movie.

Why do I get the feeling that would be a HUGE success? A "cult classic"!
lmao

Vladuz the eBay Hacker

October 25th, 2007 · No Comments

I like Vladuz. I really do.

I dont know him personally, and I havent had any contact with him - but I like the guy.

Why? Because of a couple of reasons: hes obviously good at what he does (cracking eBays systems) and he has a sense of humor about what he does (evidenced by his taunts toward eBay).

BUT one thing I dont agree with is the posting of users personal info in public - even though I can understand why he did it. How else would a good hacker get the credit he deserves? Okay so that might not be a great justification (the people shouldnt have to suffer as he fights his cause against The Man).

So here we have the dilemma: Vladuz pwns eBay totally and thoroughly, but eBay effectively covers it up, over and over again. When a video of the latest hack was posted on YouTube by my friend Cappnonymous, eBay no doubt managed to get the evidence yanked by YouTube. Vladuz just cant seem to win: wheres the publicity be deserves?

OK, seriously - Vladuz is definitely for real and I have much respect for his abilities. I just want eBay to admit that not only are their policies jacked-up but that their users info is in peril. While I can understand WHY they would cover-up and lie about Vladuz achievements, I do NOT understand why eBay cant be honest and upfront. I mean come on - whos the one whos doing unethical and illegal activities here, Vladuz or eBay? eBay isnt the one with something to hide, as long as they take solid action against their insecure systems/policies.

Anyway this is for you, Vladuz. This is my list of suggestions in your ongoing efforts.

Instead of posting the users credit card numbers, etc. do something to help them instead - like zeroing out their sellers fees.
Clean up the scam auctions from eBay - like the hacked Chinese MP3-player auctions. (BTW everyone, dont buy from the seller hailitele! Dont say I didnt warn ya.)
If you want to really prove that you have access to eBays systems, post some of their internal emails. Especially any emails from Meg.
Announce an exploit ahead of time (via a blog or something) and then do it at the specified time on eBays site when the world is watching.

I doubt Vladuz will do the first two above, but I wouldnt be surprised if we see #3 sometime in the future.

Now, to address the rather naive question I saw on one of the eBay message boards: no, Vladuz is not a Robin Hood. If he was, he would have altered listing fees for regular Joes like you and me, and he would have mysteriously done something like #1 above for lots of people. Vladuz is probably, on some level, a businessman.

I would guess that he HAS done that, but probably for only a few people that he knows. And I would also not be surprised if the majority of his eBay-prowess benefits him financially. Just think of the possibilities, if you were an eBay seller or eBay buyer, and the eBay servers were your playground! You could

Cancel/lower competing bids and win auctions for low prices
You could raise bidders bid on auctions you are selling
You could change eBay store prices to lower ones, and buy the item
You could NARU competing sellers (Vladuz has already shown he can NARU and restore users at will. Oh wait eBay said he really cant)

So this guy can benefit in many ways from eBay - he aint necessarily a Robin Hood. Hes gotta be in it for the money.

digg it

http://digg.com/security/Vladuz_the_eBay_Hacker

-- Edited by budnonymous at 22:06, 2007-10-25