Our paymanila@gmail.com email was hacked

[Ping]

Tweet

This afternoon, our paymanila@gmail.com was compromised, and someone by the name of ROSE CHUNG (fictitious most probably) took over our email.  She/he tried to access all our other accounts related to paymanila@gmail.com including our PayPal account.

We were able to delete that email address immediately.  Somehow, just about a minute ago, a client claimed to have send some funds to us using that email.

Here's our conversation.




V PM lenil2008 OFFICIAL: hello sir please confirm my payment thank u!
V PM lenil2008 OFFICIAL: 109451406102 eon account number of me! thanks.
PayManila: what payment?
PayManila: did you not get our advisory?>
V PM lenil2008 OFFICIAL: paypal po
V PM lenil2008 OFFICIAL: no po un
V PM lenil2008 OFFICIAL: what advisory po
PayManila: no we did not get any payment
PayManila: our accout was hacked
PayManila: read forum ALWAYS
PayManila: what did you send?
PayManila: where? how much?
V PM lenil2008 OFFICIAL: so paano na po
V PM lenil2008 OFFICIAL: ive send 49.76
V PM lenil2008 OFFICIAL: paymanila@gmail.com
V PM lenil2008 OFFICIAL: bakit po ganun
PayManila: file a dispute now
PayManila: at paypal
V PM lenil2008 OFFICIAL: bakit po paano po nangyayari un
PayManila: no idea
V PM lenil2008 OFFICIAL: mag didispute ako.
PayManila: FILE A DISPUTE now
PayManila: yes
PayManila: do it ASAP
V PM lenil2008 OFFICIAL: paano pag nabalik
V PM lenil2008 OFFICIAL: paano pag di nabalik
PayManila: file a dispute
PayManila: paypal na po bahala
PayManila: kami nga na hack eh
V PM lenil2008 OFFICIAL: grabeeh na man po yan
V PM lenil2008 OFFICIAL: sa email niyo
V PM lenil2008 OFFICIAL: po ung paymanila@gmail.com
PayManila: yes, the email was hacked
PayManila: and so is the facebook acct
V PM lenil2008 OFFICIAL: but di ako na advice
V PM lenil2008 OFFICIAL: paano na po ito
V PM lenil2008 OFFICIAL: i really need that cash pah naman
V PM lenil2008 OFFICIAL: sir
V PM lenil2008 OFFICIAL: i really really need that cash di man lang ako na adivice...agad...
V PM lenil2008 OFFICIAL: sir
PayManila: hello, am calling paypal now
PayManila: nothing much i can do also
PayManila:  i am very sorry
PayManila: in fact we have changed our email na, i wonder why the payment was accepted
PayManila: you MUST file a dispute
V PM lenil2008 OFFICIAL: i dont know how to dispute po bakit po ganun i need that money i believe it na u that is was ok nah so nagtaka naman ako paano nnagyari un
V PM lenil2008 OFFICIAL: i cant see option here dispute.
PayManila: log in to your pp
V PM lenil2008 OFFICIAL: kelangan kelangan ko un kung alam ko lang sana na ganito i am already on my paypal
PayManila: diba andoon yun history ng txn mo?
PayManila: pls gvie me sshot
PayManila: i will guide you
PayManila: now na
V PM lenil2008 OFFICIAL: ok
V PM lenil2008 OFFICIAL: cge
V PM lenil2008 OFFICIAL: paano pag di na bumalik ung money that ive sent 2 u
PayManila: DETAILS
PayManila: nakita mo?
PayManila: then FILE DISPUTE
PayManila: yun lang
PayManila: you know, I dont want to be rude, but stop thinking about yourself lang muna
PayManila: as I am helping you too
PayManila: while I have a pile of problem here also
PayManila: read the forum, kanina pa rin naka shout yun
PayManila: i have send out a SHOUT here too kanina rin
V PM lenil2008 OFFICIAL: i dnt inform by u
V PM lenil2008 OFFICIAL: i dnt see any messages here also
PayManila: did you do the dispute na?
PayManila: thats your best bet
PayManila: as I am doing the same too
PayManila: ok?
V PM lenil2008 OFFICIAL: i click the details
PayManila: then dispute nga po
V PM lenil2008 OFFICIAL: okay
V PM lenil2008 OFFICIAL: tapos ano what happened next
V PM lenil2008 OFFICIAL: what happened next
PayManila: then wai for pp
PayManila: can you give me scshot
PayManila: of the details
PayManila: ano ang sabi sa name
PayManila: under paymanila@gmail.com?
V PM lenil2008 OFFICIAL: paano if dont get back that money
PayManila: pls i need that for PP
PayManila: i will email them
PayManila: there's NOTHING i can do
PayManila: if you cant get back your money
V PM lenil2008 OFFICIAL: an then  ganun na lang i will lost it
V PM lenil2008 OFFICIAL: i need that urgent
PayManila: unfortunately, WE are dealing with PP here
PayManila: then give me ths sshot now?
PayManila: if ok for you, can i view your PP acct then?
V PM lenil2008 OFFICIAL: are u high
V PM lenil2008 OFFICIAL: is this really
V PM lenil2008 OFFICIAL: u
V PM lenil2008 OFFICIAL: ?
PayManila: i am caling you now
PayManila: +639088959424 is this your current number?
BUZZ!!!
PayManila: hello?
PayManila: are you going to give me a sshot or what?
PayManila: so i can be of help
PayManila: i need to go out now
V PM lenil2008 OFFICIAL: what r u doing is not good
V PM lenil2008 OFFICIAL: for ur custumer
PayManila: +639088959424 is this your current number?
PayManila: cant be reached
V PM lenil2008 OFFICIAL: i think ur not really i do transaction before
PayManila: ok then, i have a bad feeling as well re how our conversation is going
PayManila: you are not giving me the proof of your payment
PayManila: you cant be reached
V PM lenil2008 OFFICIAL: u can forward
V PM lenil2008 OFFICIAL: the email
V PM lenil2008 OFFICIAL: wait
V PM lenil2008 OFFICIAL: why u gonna opened my paypal
PayManila: your number?
PayManila: i will call you na lang
PayManila: ok?
V PM lenil2008 OFFICIAL: ok
PayManila: if not, mag log out na po kami
V PM lenil2008 OFFICIAL: i think
V PM lenil2008 OFFICIAL: di talaga ikaw
V PM lenil2008 OFFICIAL: ung transaction before
PayManila: ok, you think what you want to think,
V PM lenil2008 OFFICIAL: u weird  hope ur not bad
V PM lenil2008 OFFICIAL:
PayManila: yeah, likewise
V PM lenil2008 OFFICIAL: i will ask in forum
PayManila: sure
PayManila: i will post our conversation there
PayManila: if you like you can please do it
PayManila: ok?
PayManila: all we are asking now is for you to give us the sshot
V PM lenil2008 OFFICIAL is typing a message.
V PM lenil2008 OFFICIAL has signed out. (10/28/2010 9:04 PM)

PayManila: as proof, kasi kanina pa namin tinanggal ang paymanila@gmail com sa PP Bookmark

[Ping]

Tweet

In the meantime, we will suspend all services pending investigation.

DO NOT deal with paymanila@gmail.com email.

Please POST it here, if you get any email correspondence from it.


BE VERY CAREFUL.

You know how/where to reach us

[lenil2008]

Tweet

BEWARE:

HELLO  PLEASE DONT SEND ANY PAYMENT TO paymanila@gmail.com I WAS VICTIMIZED I DID SEND A PAYPAL FUND TO THAT ACCOUNT ITS TRUE THAT THE ACCOUNT WAS HACKED I FILING A DISPUTE THANK U TO SIR FOR THE ASSISTANCE!
WHEN I WAS SEEN AND REVIEW THE TRANSACTION HISTORY THE NAME APPEAR IT WAS DIFFERENT ON PAYMANILA!
NAME WAS: ROSE CHUNG:

IM VERY UPSET....:(:(:(
MORAL LESSON: wag po tau padalos dalos nang send payment kelangan natin antayin si sir na mag online before we transact!

GOD BLESS!

[Ping]

Tweet

Besides, the account is now UNVERIFIED.





 

[Ping]

Tweet

Be very careful.

We dont have access to our FaceBook account as well, as of now.

 

[charmaine]

Tweet

I don't know why this kind of people exist, tsk tsk.

[jhaybron]

Tweet

Aba Aba. buti na lang maaga ako nakipagtransact sayo si ping noh. kundi na perwisyo pa ako. I think alam nya details mo sir ping. kasi pano nya na hack account mo kund di nya alam ang details mo. ganun lang yun kadali. But syempre we still dont know what Happened.

Patayin natin sir ping kung makilala natin yun. ang dami nya pala na perwisyo. I am a web developer po i suggest that you will used the merchant tools for your safety and our safety of course. hussle free pa po yun.

[Grumphus]

Tweet

Another successful hack?

While I do believe that the this compromiser is out of his/her mind, I strongly suggest you guys look into the security of your accounts and awareness of phishing.

Getting your PayPal hacked twice is a very rare instance and I do know that services like PayPal and Facebook are not very easy to break into. If it was easy by the average script kiddie, everyone would be suffering from hacking issues.

Me I put 10+ character passwords and avoid any suspicious login pages that I see. I think even PayPal lets you add two security questions. I also make my Gmail, Facebook, and PayPal passwords different making it more difficult to break in. Analyze all business accounts and make sure they do not connect in some way. The latest Google Chrome and Mozilla Firefox browsers have improved security and even highlight the domain to make sure you are not visiting a fake page.

I cannot think of any other way this hack was transpired. Extreme preventative measures will hackers from even thinking twice about jumping right in and it will eliminate all of those tedious and time consuming investigations.

If the problem is something out of my knowledge, I'd love to be enlightened on how this person got in so I can further develop my security. Thanks and hope to see your services back soon. You guys have my support all the way.

[eckhosoft]

Tweet

Site & Database Secured

[Ping]

Tweet

Only gmail and FaceBook was compromised. 

Thanks to the added security of PP, AP, and MB; at least naagapan namin.  Pero we always keep a low inventory naman lagi.


I think this ROSE CHUNG created a new PP acct using our hacked paymanila@gmail.com.  Last I checked, parang iniba na rin nila.

We apologized for any inconvenience caused, and is planning to put in more safety features.  In the meantime, all services are suspended temporarily.

Baka nga kakilala namin ito, kasi parang tuwing may offline or special schedule, nangyayari itong ganitong anomalya.

[ikhayte]

Tweet

So sad to hear about this. Anyway, can we still avail of your service ngayon sir? ;(

[eckhosoft]

Tweet

So sad to hear about this. Anyway, can we still avail of your service ngayon sir? ;(

Please Kindly Check our Special Schedule

http://paymanila.com/forum/index.php/topic,1944.0.html

[rayter]

Tweet

Grabe. I didn't know na ganito kagrabe. Tsk.

[ikhayte]

Tweet

Sa mga navictimized, it's certain naman po na maibabalik ang funds niyo but the downside is, it'll take Paypal over a month bago sila makapagrefund.. I already have filed a dispute and won before anyway so I guess it's okay to affirm. This happens talaga. ;( Relax lang po. Everything will fall to its right place!

[bhety]

Tweet

Hope this info can help others...

One of the added features for gmail is to phone verified your gmail account. That way you can reset the password through your phone. For accounts that are highly important it is advisable to change the password lets see every 15 days, Just like how the bank implement their password management. This kind of practice helps. Do not open your important account in an open wi-fi like bank account, facebook, emails and other significant online accounts. In the blackhat world there is a software that can access to your account and possess the password once you opened your accounts in an open wi-fi...Starbucks, Burger King, robinson, SM, they may seem cool because they offer free internet connection... but the bad guys are always lurking so never ever open any important account in an open wi-fi.

Facebook security is questionable... they only have only SSL protection on its first level. They are very easy to hacked especially when you open it in an open wi-fi where everyone shares an unprotected connection.

I hope maresolve po agad ang issue nyo sir ping... may mga tao talagang gusto ang easy money ayaw magbanat ng buto...