1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Paypal + VPS = Hack?

Discussion in 'BlackHat Lounge' started by skittles, Aug 6, 2012.

  1. skittles

    skittles BANNED BANNED

    Joined:
    Aug 17, 2011
    Messages:
    697
    Likes Received:
    761
    So I was dumb enough to login from a VPS and noticed today a "client" has been giving me Transaction IDs and I was naive enough to process their orders without realizing they were actually from old customers which were not related in any way.

    Did I get my Paypal hacked or how else can someone find a Transaction ID - are the original Paypal owners the victims. Isn't the buyer the only one who has access to a transaction ID while the seller receives a transaction receipt?
     
  2. Execute

    Execute Supreme Member

    Joined:
    Aug 30, 2010
    Messages:
    1,350
    Likes Received:
    5,018
    Location:
    United Kingdom
    The transaction id is also sent as an email confirmation so they might not have direct access to your paypal and just your email address so I would change the password there as well.
     
  3. Theodore

    Theodore Power Member

    Joined:
    Oct 13, 2009
    Messages:
    682
    Likes Received:
    266
    What comes to mind for me is, do you offer a BST on this forum? If so people usually post there transaction ID on the thread sometimes and someone could be using them? Just a thought.
     
    • Thanks Thanks x 1
  4. wpbacklinks

    wpbacklinks Elite Member

    Joined:
    Mar 27, 2010
    Messages:
    3,447
    Likes Received:
    1,364
    Gender:
    Male
    Occupation:
    Affiliate Marketer
    Location:
    Everywhere
    I also want to know this. i read an article somewhere that buyer & seller get different transaction id.
     
  5. skittles

    skittles BANNED BANNED

    Joined:
    Aug 17, 2011
    Messages:
    697
    Likes Received:
    761
    I do offer a BST thank you I will look into this you may be right on the spot.
     
  6. skittles

    skittles BANNED BANNED

    Joined:
    Aug 17, 2011
    Messages:
    697
    Likes Received:
    761
    Yes sellers and buyers get a different transaction ID I just confirmed this multiple times just now processing.
     
  7. skittles

    skittles BANNED BANNED

    Joined:
    Aug 17, 2011
    Messages:
    697
    Likes Received:
    761
    You were 100% right damn all the public transaction IDs posted on my thread are the ones this person used to get a free service from me. Thanks for helping me
     
  8. Black.Star

    Black.Star Junior Member

    Joined:
    Oct 4, 2011
    Messages:
    185
    Likes Received:
    1,028
    Occupation:
    IT security specialist
    Location:
    Europe
    You might want to ask your customers in the future to message you the ID privately...
    There is really no need to have any kind of customer related information publicly available for everyone to see.

    ~Black.Star~
     
    Last edited: Aug 6, 2012
  9. shaddelick

    shaddelick Regular Member

    Joined:
    Sep 14, 2008
    Messages:
    368
    Likes Received:
    126
    Will you retaliate and teach them a lesson? Or just turn the other cheek? Curious
     
  10. ShadeDream

    ShadeDream Elite Member

    Joined:
    Nov 27, 2008
    Messages:
    2,215
    Likes Received:
    5,239
    Location:
    He who laughs last, laughs longest.
    You should name and shame their websites.