eBay Fraud Scams exposed

About a month ago media news reported arrest of Romanian coder, eBay hacker Vladuz, whose real name is Vlad Constantin Duiculescu, a young ( 20 year old ) high school graduate from Bucharest, who illegally accessed the e-Bay database from 2005 to 2007 and caused $2m in damage to the online sales site.

Just last month, Vladuz was arrested in a joint operation by the Romanian anti-organised crime unit and the Home Intelligence Service.

He told the judge that he hacked the e-Bay servers because he wanted to be famous and had abandoned school because he had nothing to learn there. It would be nice to get the transcript of what else Vladuz he told the judge since eBay denies any hacking to eBay servers ever occured. Remember, eBay labeled this incident as “- Some messages were published on a community board on the eBay.de (Germany) web site by a person who gained access to a small number of employee email accounts.” and here eBay spokespersong proclaiming “He did find access to a small amount of customer service rep e-mail accounts. He used those to go on discussion forums, as a pink — when an employee posts, it’s highlighted in pink. He did that in an attempt basically to say, ‘Ha ha, look what I did.”

It’s fantastic to hear this hacker kid was arrested, hopefully they will lock him up for a while. It would be interesting to see how eBay claims their security was not breached at all while the hacker braggs about accessing eBay system and servers. It’s the cover up odor that bothers me on this. eBay misleads it’s customers into a false sense of safety and security.

Some Follow up Vladuz : eBay Hackers from Romania bits:

• Here is a link to the article from Southeast European Times from 5/22/2008 giving some additional information on Romanian hackers posing increasing international threat

• Here is a Google Translateed article about partnership between Romanian Authorities and Ebay which stemmed from the investigation of the Vladuz case

So when shopping on eBay, be extra vigilant! As of today the same scammer, phisher and hacker we’ve been tracking for YEARS is still alive and well, hijacking eBay sellers, uploading fake scam eBay auctions and scamming HUNDREDS of unsuspecting eBay buyers into thinking eBay is safe place to shop. Seller feedback does not mean anything when seller has been hijacked!

OK, enough with words, let’s lay down some proof. Here are auctions this scammer is running on MANY HIJACKED SELLER ACCOUNTS ON EBAY. These are just auctions he is running this minute. He is not a very smart hacker, if we can find him for years without any special tools. Obviously, he is smart enough to be evading eBay security army that consists of 2,000 security professionals backed by 5 Billion dollars in cash.

The phisher is currently using this line:
NOTICE: Please do not bid if you don’t have the money. I will cancel all bids if you do not contact me first. I have had bad experience with non-paying bidders and I do not want that to repeat. If you are interested and want to know more about this auction then please email me at:
Mitica233@aol.com

• eBay seller Seller: jsti**on54 Feedback:100 % Positive Member: since Aug-20-03 in United States hijacked, with fake auction on DW Drum Collector Series Drums drum set This Fake eBay auction has 14 Bidders, [[ read as 14 victims of this scammer, who believe they are safe on eBay dealing with 100% feedback seller, those eBay victim buyers are being mislead by eBay inti thinking they are safe on eBay]]
• The same scammer hijacked another 100% Feedback eBay seller Seller: fool4**nkin Feedback: 100 % Positive Member: since May-21-04 in United States and is currently running scam fake eBay auction or Roland Electronic Drum Sets -TD20S-BK - V-Pro TD20 Kit which has 19 Bids now - Read 19 VICTIMS and on the same hijacked eBay seller account, he is also running Fake Scam eBay auction for Sean Ryon 16 Ranch Cutting Saddle with additional 11 BIDS / Victims. The strategy is simple, hacker collects bids from unsuspecting sellers and as soon as the scam auction price reaches higher value (here is a screenshot of that same auction few minutes later), he cancels all the bids- screenshot here so he can attract more victims to this super bargain listing.
• And that’s not all, there are many more hijacked by him, like this 100% Feedback eBay seller karenzita1 Feedback: 100 % Positive Member: since Oct-05-05 in United States where the eBay scammer uploaded Fake auction on eBay for Roland Fantom X8 with Case and this auction has 15 BIDS ..ehm.. read Victims who think eBay is safe place to shop.
• Yep, there is more, this scammer has also hijacked Seller: kigh**oy
  Feedback: 100 % Positive Member: since Apr-23-99 in United States and uploaded Scam Auction for Canon XL2 BRAND NEW and currently has only 1 Bidder Victim.

• Another Hijacked eBay Seller: angi**61 Feedback: 100 % Positive
  Member: since Nov-17-02 in United States where this scammer uploaded Fake eBay auction for John Deere 425 Lawn & Garden Tractor

• Another 100% eBay Seller: ferns**ction Feedback: 100 % Positive
  Member: since May-02-00 in United States hijacked with a SCAM Fake auction on eBay for Precor EFX576i Elliptical Crosstrainer

• Another 100% Feedback eBat Seller Hijacked dymun**l2k5 Feedback: 100 % Positive
  Member: since Apr-03-05 in United States with a Scam eBay Auction for Bose Lifestyle series 4 Surround System :: Note in that Screenshot: PAYPAL ACCOUNT REQUIRED TO BID! The scammer will try to hijack bidder paypal accounts and most likely is able to Accept PayPal payments. PayPal is becoming a favorite payment method of those scammers

At the moment there are other hackers we could find quickly, using disposable email addresses luring unsuspecting buyers. Some of the hackers have Hijacked PayPal accounts so the Western Union eBay payment is no longer a sole payment way you can get scammed with. Hijacked PayPal accounts have become an important tool for eBay phishers / scammers.

This scammer is currently using disposable email address rb.biz99@gmail.com

and hijacked eBay Seller: da**ta$2 ( 433) Changed User ID (less than 30 days) Feedback: 100 % Positive Member: since Jun-13-01 in United States and uploaded Fake Scam eBay auction for PRECOR 576i ELLIPTICAL CROSSTRAINER (EXPERIENCE SERIES) : note this auction ends in 8 Minutes! so much for eBay Trust and Safety Team of 2000 security professionals removing FAKE auctions quickly.

Yet another Scam Disposable email address proclaiming this on another hijacked eBay Seller Account:

BEFORE YOU BID,CONTACT ME FOR THE BUY NOW PRICE,BECAUSE IT IS VERY LOW!!!
Please email me ONLY at: davidbarr011@gmail.com ! If you really want it !

Here he has hijacked eBay Seller: neurosoc**lite Feedback: 100 % Positive
Member: since Sep-10-03 in United States and is successfully running a fake eBay Scam auction for **NEW** 17′ APPLE MACBOOK PRO 2.4 GHZ 4GB RAM 160 GB HD with 22 bids [[ victims to false security feeling on eBay ]] This auction has been running since yesterday and certainly collected plenty victims who will get burned on eBay again.

And last but not least, you can take a look at this 100 % feedback seller marked by a hijacker whose current tag line is :
My Request is to CONTACT me directly to my email address
My personal EMAIL adres is : deangalbin@gmail.com

The poor Hijacked ebay Seller Seller: ri**3 Feedback: 100 % Positive
Member: since Jan-03-00 in United States even noticed his account is hijacked on on this fake auction for BRAND NEW XBOX 360 Elite Console+2 Controllers & Game the hijacked seller posted 3 days ago! :
On May-21-08 at 06:17:35 PDT, seller added the following information:
THIS IS NOT MY ITEM!! Please do not bid!!

Although eBay would like you to believe it is safe to shop there, the evidence suggests otherwise.