eBay's Corporate Network Hacked

Thanks Yegor I changed my password just in case!
 
Daniel 😉

Here's a quick breakdown on the situation that can be shared in-house

On Wednesday, eBay issued an advisory to users stating that passwords will need to be changed, after a database containing user information was compromised. When a company this large reports a security incident, it has the tendency to turn into a FUD-fueled news cycle.

In the event that people within your organization have questions, here's an overview of the incident, with some additional details you can use when discussing the situation.

How did this happen?

According to eBay, attackers compromised employee log-in credentials. This gave the attackers access to the corporate network and the systems on it.

As is the case with most attacks that result in credential theft, the attackers likely used a socially-based attack of some kind. The best bet is Phishing. However, eBay isn't discussing how the credentials were compromised, so it could be Phishing, or it could be malware. The public may never know.
 
Full Article

Yegor and Jasper, many thanks for posting!

Thanks Jasper.  I'm just glad I've never really used either one.

I've heard of it only yesterday morning. I was at the lab all day. I changed the password in the evening.

@
Use LastPass or WSA-I/WSA-C's LastPass based password manager. The 'Security Check' tool of LastPass tells me which websites are compromised. So you can always have a peace of mind.:)

May 27th, 2014, 14:51 GMT · By Gabriela Vatu
 
 
If you’re an eBay user, you’ve certainly heard by now of the massive data breach that put in danger some 145 million people. The company has been advising users to change their passwords if they’re among the many affected and emails have been sent over the past few days.

Since phishing attacks are aplenty, you should be careful what links you access and know how to detect the good emails from the scams.

First of all, eBay’s email reads “Important – eBay Password Reset Required” in the subject line and the message comes from ebay@reply1.ebay.com.

The lengthy email explains the situation eBay is in and why it’s necessary to change your password, while being signed by Devin Wenig, eBay marketplaces president.
 
Full Article