Discussion Forum: Thread 335249

 Author: TwoButtonBricks View Messages Posted By TwoButtonBricks
 Posted: Feb 20, 2023 21:31
 Subject: Store being hacked
 Viewed: 268 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

TwoButtonBricks (15543)

Location:  USA, Texas
Member Since Contact Type Status
Feb 13, 2009 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 4 Button's bricks
Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.
 Author: Nubs_Select View Messages Posted By Nubs_Select
 Posted: Feb 20, 2023 21:33
 Subject: Re: Store being hacked
 Viewed: 80 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Nubs_Select (3785)

Location:  Canada, Ontario
Member Since Contact Type Status
Mar 15, 2016 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Nub's Select
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

they take about 3 weeks to respond. perhaps try changing your email also and
then change your password at the same time (also make sure you download a copy
of your inventory just incase they decide to try and hold it hostage
 Author: peregrinator View Messages Posted By peregrinator
 Posted: Feb 20, 2023 21:56
 Subject: Re: Store being hacked
 Viewed: 68 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

peregrinator (777)

Location:  USA, New Jersey
Member Since Contact Type Status
Jan 21, 2003 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Faber Family Bricks
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

It sounds like this person may have access to your email? I don't see how
else he or she could be changing your password after you've changed it, other
than using the forgot password functionality (which sends an email to your address).
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Feb 20, 2023 21:59
 Subject: Re: Store being hacked
 Viewed: 89 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52407)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Yes, you already lost 2 buttons on the 4


So you closed the shop and they couldn't open it back?

That mean they don't have access to your BrickLink account, otherwise the
shop would be opened (with a 50% sale).

You've a problem with your PayPal account? Did you check there if it's
not compromised? Put a difficult password?

"Changed the payments to go to their account" = what does this mean
exactly?
 Author: wildchicken13 View Messages Posted By wildchicken13
 Posted: Feb 20, 2023 23:17
 Subject: Re: Store being hacked
 Viewed: 89 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

wildchicken13 (876)

Location:  USA, Illinois
Member Since Contact Type Status
Aug 11, 2014 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Wild Chicken
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

You may want to consider changing the email address you use for BrickLink.
It sounds like the hacker may also have access to your emails, if they can reset
your password.
 Author: 1001bricks View Messages Posted By 1001bricks
 Posted: Feb 21, 2023 00:31
 Subject: Re: Store being hacked
 Viewed: 104 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

1001bricks (52407)

Location:  France, Provence-Alpes-Côte d'Azur
Member Since Contact Type Status
Sep 6, 2005 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 1001bricks
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Apparently Russell did something, Shop has been forced closed - that's a
great service!

Now all this isn't normal; PM me if you wish help.
 Author: TwoButtonBricks View Messages Posted By TwoButtonBricks
 Posted: Feb 21, 2023 01:09
 Subject: Re: Store being hacked
 Viewed: 107 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

TwoButtonBricks (15543)

Location:  USA, Texas
Member Since Contact Type Status
Feb 13, 2009 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: 4 Button's bricks
Update:

Yes, thanks Russell for stepping in and suspending our store, however the hacker
appears to have control of our email linked to bricklink. We can no longer open
that email. Let us know when our account appears to be safe and we will enter
a new email address for contact.

Thanks

In Help, 1001bricks writes:
  In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Apparently Russell did something, Shop has been forced closed - that's a
great service!

Now all this isn't normal; PM me if you wish help.
 Author: bahpstore View Messages Posted By bahpstore
 Posted: Feb 21, 2023 08:21
 Subject: Re: Store being hacked
 Viewed: 62 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

bahpstore (21055)

Location:  USA, Virginia
Member Since Contact Type Status
Sep 20, 2016 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: BAHP Store
Best use of "Preventive Action"

Bravo, Russell.


In Help, TwoButtonBricks writes:
  Update:

Yes, thanks Russell for stepping in and suspending our store, however the hacker
appears to have control of our email linked to bricklink. We can no longer open
that email. Let us know when our account appears to be safe and we will enter
a new email address for contact.

Thanks

In Help, 1001bricks writes:
  In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Apparently Russell did something, Shop has been forced closed - that's a
great service!

Now all this isn't normal; PM me if you wish help.
 Author: Poncke View Messages Posted By Poncke
 Posted: Feb 21, 2023 08:22
 Subject: Re: Store being hacked
 Viewed: 69 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

Poncke (100)

Location:  Ireland, Meath
Member Since Contact Type Status
Oct 30, 2021 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: Hobby Brix
In Help, TwoButtonBricks writes:
  Update:

Yes, thanks Russell for stepping in and suspending our store, however the hacker
appears to have control of our email linked to bricklink. We can no longer open
that email. Let us know when our account appears to be safe and we will enter
a new email address for contact.

Thanks

In Help, 1001bricks writes:
  In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Apparently Russell did something, Shop has been forced closed - that's a
great service!

Now all this isn't normal; PM me if you wish help.

You can call the email provider and get your account back And if its Gmail, you
might have a bigger issue as your password now logs you into all your Google
products.
 Author: ErwinNL View Messages Posted By ErwinNL
 Posted: Feb 21, 2023 08:04
 Subject: Re: Store being hacked
 Viewed: 75 times
 Topic: Help
Cancel Message
Cancel
Reply to Message
Reply
BrickLink
ID Card

ErwinNL (622)

Location:  Netherlands, Overijssel
Member Since Contact Type Status
Oct 27, 2019 Contact Member Seller
Buying Privileges - OKSelling Privileges - OK
Store: TheBug
In Help, TwoButtonBricks writes:
  Someone has hacked into our store and changed the payments to go to their account.
Every time we change it back they change it again. We change our password then
they change it again. Very frustrating. Any advice would be appreciated. Sent
an email to help desk but not sure how long it will take to respond.

Make sure your computer is clean, change all passwords on another one, and also
reset all API keys.

Use complex passwords and a secure password manager.

Report the account they entered, maybe it can be traced back.

Good luck!