Page 1
Page 1
Started By
Message

cc fraud/hacked fb (warning very long)

Posted on 2/25/16 at 12:08 am
Posted by beauchristopher
new orleans
Member since Jan 2008
66431 posts
Posted on 2/25/16 at 12:08 am
Sorry if this is long. Looking for any suggestions..

On Sunday, I used a bank card for the first time all month. This is a card I primarily pay bills on over the phone only.. but was not using this past month.. and this card never leaves my house.. well I ordered a pizza from Papa Johns with this bank card on their website.. it already had my card info stored from one purchase months ago.. so all i had to do was enter the code on the back and submit my order. this was late at night.. 10:30 pm..

Well while waiting for my pizza, I called my bank to check the account balance.. and it immediately transferred me to the fraud department.. which was strange. They said there was a charge in Georgia at some hotel-like place or something.. for $9.99.. and that triggered unusual activity.. given I am in Louisiana and just used the card locally the same night.. I said that was definitely not me as I don't leave the state.. and just ordered a pizza.. and so they immediately cancelled my card..

Well I still needed to know my balance on this particular card.. and it was pretty much wiped out.. to $4.. I was stunned! There was suppose to be around $600 on this card.. so I asked for the recent transactions.. and there were a ton.. a couple of $200+ transaction to some website called flipkart.com (i looked it up and it is some Indian based company.. which is shady!) then some other small charges to something called tmart.. then they even purchased 2 match.com accounts! which initially seemed like a silly thing.. until I mentioned it to my mother who said that they have foreign guys on there all the time get accounts to try to take advantage of desperate women and scam them out of money.. that actually makes sense now.. well any ways there were tons of transactions that I did not make.. and they ALL came after I ordered the pizza at 10:30 that night.. so to me, it seems that it had something to do with that online order.. i still don't see how.. but I thought maybe their servers got hacked somehow.. but papajohns is denying it is possible..

so fast forward to today (wednesday) my mom got an account alert that her facebook had possible unauthorized log in. this never happens either. it said someone from Georgia.. logged in under her name via Google Chrome on windows 7..

we don't know anyone in Georgia and this was the 2nd time this week we had been hacked or whatever and it traced back to Georgia..

so there is some massive shady stuff going on..

I am asking if anyone even knows how any of this is possible or what might be going on.. and what I might need to do to get safe.. because this is really strange.. the original fraud of the credit card and being traced back to georgia alone doesn't make sense.. how can they clone a card if they don't have it to use in person.. and then why did they do all that online shopping.. and all of it happened the one night after my only purchase this month...

should i get my isp to change? should i run any type of spyware programs on all my computers? i am guessing i need to change all my passwords, especially e-mail..

most of my passwords are pretty much the same for everything.. and i recently updated all our computers to windows 10 as well. but that was kinda months ago. i also have team viewer installed.. with yet again easy passwords and all my computers are shared.. but still i don't have any of the credit card info on the computers to my knowledge and i don't see how they got the facebook password even if passwords are saved.. unless maybe there is a way to actually view the passwords.. strange that they would login to her account from georgia.. and if they are this sophisticated perhaps they just make their isp trace back to georgia on purpose.. but the original fraud trigger person said that it was an attempted use of the card like in georgia.. not online.. so i don't get how that's even possible..
This post was edited on 2/25/16 at 5:20 am
Posted by boXerrumble
Member since Sep 2011
52301 posts
Posted on 2/25/16 at 6:37 am to
quote:

most of my passwords are pretty much the same for everything.


I kinda skimmed through your post, but this is your first problem.
Posted by VABuckeye
Naples, FL
Member since Dec 2007
35642 posts
Posted on 2/25/16 at 7:38 am to
quote:

On Sunday, I used a bank card


Actually this is the first problem. People need to realize that using a debit card gives a thief access to their bank account. Always, always use a credit card. If compromised, it's much easier to deal with than someone stealing directly from your bank account. I realize that banks cover debit cards as well but it's simply bad practice to use them.
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 7:53 am to
First off, they probably are not in Georgia. Most likely Russia/East Europe. Id imagine they are operating from a compromised webserver that is hosted somewhere in that State. The places the charges were made to are probably being operated by them as well. So the "charges" are them just basically draining the money out of your account.

Now, as to how all this happened... Very hard to say. My guess would be there is malware running on your PC that is harvesting account credentials and/or banking info. If PapaJohns main website was compromised that would be in the news.

As far as what to do now.... Sanatize every computer you own, change every password, cancel all your cards, and activate fraud protection on your credit reports.
This post was edited on 2/25/16 at 7:55 am
Posted by BACONisMEATcandy
Member since Dec 2007
46644 posts
Posted on 2/25/16 at 8:48 am to
quote:

Actually this is the first problem. People need to realize that using a debit card gives a thief access to their bank account. Always, always use a credit card. If compromised, it's much easier to deal with than someone stealing directly from your bank account. I realize that banks cover debit cards as well but it's simply bad practice to use them.


This is why I use my Amex for all of my transactions
Posted by boXerrumble
Member since Sep 2011
52301 posts
Posted on 2/25/16 at 9:27 am to
Completely missed that part. You are correct
Posted by lsujro
north of the wall
Member since Jul 2007
3926 posts
Posted on 2/25/16 at 9:53 am to
quote:

As far as what to do now.... Sanatize every computer you own, change every password, cancel all your cards, and activate fraud protection on your credit reports.


i would do the change in passwords on another computer, like a friend's or something. and I would activate two step authentication for every account that allows it - especially your primary email. Obviously alert every bank and credit card company of the fraud and print all your recent transactions to start documenting the damage.
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 9:57 am to
quote:

i would do the change in passwords on another computer, like a friend's or something.


once you sanitize your own PCs there is no reason you cant safely change passwords from them, in fact that's what I would recommend to do. I wouldn't recommend resetting all of your passwords on a friends computer. How can you be sure their computer is safe to do that from.
Posted by lsujro
north of the wall
Member since Jul 2007
3926 posts
Posted on 2/25/16 at 10:10 am to
quote:

once you sanitize your own PCs there is no reason you cant safely change passwords from them


i agree with this, but my first step would be to change the pw's rather than sanitize the pc. and how can he be sure he has removed the malware from his own computer?

if he's worried about his friend's computer, he can just find a friend with a mac
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 10:14 am to
quote:

i agree with this, but my first step would be to change the pw's rather than sanitize the pc. and how can he be sure he has removed the malware from his own computer?

if he's worried about his friend's computer, he can just find a friend with a mac



when i say "sanitize" i mean wipe the drive with a couple passes of 1s and 0s then reinstall the OS. Malware gone. you can have that done in an hour or 2 tops. i would want to know that the PC I was resetting all of my passwords from was clean. My buddy's Mac is not good enough assurance.
Posted by mattgr1983
Austin, Tx
Member since Oct 2012
2434 posts
Posted on 2/25/16 at 10:41 am to
quote:

Well while waiting for my pizza, I called my bank to check the account balance..


WUT?
Posted by GFaceKillah
Welcome to the Third World
Member since Nov 2005
5935 posts
Posted on 2/25/16 at 11:27 am to
quote:

he can just find a friend with a mac


Posted by lsujro
north of the wall
Member since Jul 2007
3926 posts
Posted on 2/25/16 at 11:51 am to
quote:

when i say "sanitize" i mean wipe the drive with a couple passes of 1s and 0s then reinstall the OS. Malware gone. you can have that done in an hour or 2 tops. i would want to know that the PC I was resetting all of my passwords from was clean. My buddy's Mac is not good enough assurance.


two hours would be enough for whoever has his info to access a few more accounts, no?

i haven't installed an OS in a few years, but last i did it took about 2 hours by itself. also, i'm assuming if he's posting all this here, he is not a very skilled user and likely wouldn't be comfortable "wiping the drive with a couple passes of 1s and 0s." also, what about any data he would want to backup beforehand? it's not really as simple as you make it sound. priority #1 here is to lock them out of his accounts. priority #2 is to find a nerd friend to do all that crap you just said to his computer.
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 12:29 pm to
quote:

two hours would be enough for whoever has his info to access a few more accounts, no?

i haven't installed an OS in a few years, but last i did it took about 2 hours by itself. also, i'm assuming if he's posting all this here, he is not a very skilled user and likely wouldn't be comfortable "wiping the drive with a couple passes of 1s and 0s." also, what about any data he would want to backup beforehand? it's not really as simple as you make it sound. priority #1 here is to lock them out of his accounts. priority #2 is to find a nerd friend to do all that crap you just said to his computer.


im telling you what I would do, and it wouldnt take me 2 hours.

that being said, you could change the passwords on your mobile device as well and that may very well be secure. However, if you dont know how/where you were compromised the only way you can be sure your administering your accounts from a secure location is to do that on a fresh install.
Posted by lsujro
north of the wall
Member since Jul 2007
3926 posts
Posted on 2/25/16 at 1:06 pm to
quote:

priority #2 is to find a nerd friend to do all that crap you just said to his computer.


quote:

im telling you what I would do, and it wouldnt take me 2 hours.


sounds like you're his guy (no offense intended)
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 1:09 pm to
quote:

sounds like you're his guy (no offense intended)



lol... i used to be that nerd. now i attempt to tell other nerds what to do
Posted by Wranglerinbama
Gulf Coast of AL
Member since Feb 2016
153 posts
Posted on 2/25/16 at 1:10 pm to
Sounds like he should take his computer to a local shop and pay them to clean his computer. That is if he isn't confident in his own abilities for the task. It would only cost about $100 bucks and he would know if was done by a professional. They can install all the free software he needs, spybot, antivirus, maleware etc.
To me it would be worth the cost to have it done by a pro.
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/25/16 at 1:11 pm to
quote:

Sounds like he should take his computer to a local shop and pay them to clean his computer. That is if he isn't confident in his own abilities for the task. It would only cost about $100 bucks and he would know if was done by a professional. They can install all the free software he needs, spybot, antivirus, maleware etc.
To me it would be worth the cost to have it done by a pro.


you appear to have a large amount of confidence in your local geek squad. prayers sent
Posted by Wranglerinbama
Gulf Coast of AL
Member since Feb 2016
153 posts
Posted on 2/25/16 at 5:21 pm to
quote:



you appear to have a large amount of confidence in your local geek squad. prayers sent


Ok smart guy, I don't go best buy so no geek squad for me.


I do have confidence in the local computer tech business I deal with and buy our systems through. Even though I can get a little better deal buying direct from the manufacturer(typically only buy Lenovo ThinkPad for our business sysytems) I like having a local shop i can go to if issues arise or need a little help.
Posted by gmrkr5
NC
Member since Jul 2009
14904 posts
Posted on 2/26/16 at 8:13 am to
you sure did take that comment personally. lighten up Francis
first pageprev pagePage 1 of 1Next pagelast page
refresh

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram