cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

Dear all, I am a seller that sells xbox game pass, which I send the pass over to buyers via message.

recently I get multiple reports from buyers say the code I message them shows redeemed after a few days without use. I thought my password leaked so I changed it, and turned on  2 step authentication. I found they can still log in somehow and see my message.

I send a test message to my wife's account with a code, and next day, it was redeemed. I am able to see some devices log in to my account through sign in activity, but no device or IP is showing, no notification from ebay at all, no text, no app push, no email. This must be some serious bug with ebay!! I called support last week and they say they will create a case, but I haven't heard back anything for 3 days now. This is MAD and very SERIOUS!!

I asked some other sellers who also sell xbox game pass and they are able to see similar patterns in their sign in activity, and fortunately they send email instead of message, so they don't have any issue.

Please be aware!!!

 

 

s-l1600

Message 1 of 8
latest reply
7 REPLIES 7

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

I would say the issue is not your eBay account but your devices you use to connect to eBay. There is probably malware on them. I would get rid of them. They are compromised. 

Message 2 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

no, I am system admin myself. I am 100% my computer is malware free. also, not just myself buy other sellers. I asked two other sellers. totally different places. they see similar pattern log into their devices. all the code I send via email have 0 issue so far. if they have access to my computer, all my codes are gone now. not just the ones I send out via message.

Message 3 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

I got permission from another seller who also sell xbox game passes and he is in the same boat like me.

We are not the only two, I contacted other sellers selling xbox game pass and two others find the same.

 

0241103215743.jpg

Message 4 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages


@zhe-7779 wrote:

I am able to see some devices log in to my account through sign in activity, but no device or IP is showing, no notification from ebay at all, no text, no app push, no email. This must be some serious bug with ebay!!

 

s-l1600


It's not a bug. eBay reps do not need a login or password to help* with your account @zhe-7779 as they are already on the eBay network. That's why there's no device or location.

 

When they do, they assume your member ID so that they can try the same steps with any issue you're having. So a rep can click on the sents to see what you've sent, without needing to mark* it unread afterward.

 

And this happened because you're a seller of resellable intangible items.

 

*You have a few clues now, on how to set some traps.

Message 5 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

all the code I send via email have 0 issue so far.

 

Even I can draw the appropriate conclusions.  ðŸ˜Š

eBay seller since 1999. This is a posting ID.
Message 6 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

what conclusion you are talking about?

Message 7 of 8
latest reply

Ebay Serious Bug, hacker can log in bypass my 2 step authentication and see my messages

thanks for that information, but still. I have no idea how my code sent via messages get stolen then.

Message 8 of 8
latest reply