Beware Account hackers are here !

[Bazhemps]

Hi Folks,
It happens, morgage account with large bank, come home to letter from said bank advising me the they are in receipt of change to my contact details, if I did not provide this information contact them immediately. On doing so I was advised I had change my mobile phone number. It took some convincing them that my Wife or Myself had not instigated this, my number was immediately change back to original. I asked how this could happen and they said an investigation would take place. Arrive home next day to 4 letters advising us that a new payee had been added to our account. Back on the blower and am told it must be a friend of ours, informed them the person was unknown to us. (to withdraw from our account you set up the Payee and a code is texed to you to approve the payment so thats why my mobile no. was changed) after 4 attempts you would think the Bank would have been suspicious. Luckily we have a withdrawal cap on the account, I am guessing this shister went the full monty and was unable to withdraw. Bottom line is account suspended, new cards to be issued, new pin numbers, set up new account and one week without access to our money. Called them back to see if investigation had taken place, would not divulge any thing to us only to say it appeared an inside job as the other account was with held with the same bank. Thanked me for being alert to what was going down "DUH". We do not use mobile phone for banking the only time we access is at home on P.C. and the access with passwords we thought was very secure, they have since changed their system for payments. So be alert.
Baz

[mudski]

@ Mudski read first post

Doesn't explain how he found this out....

[lorrieandjas]

Someone with a IP address: 188.143.232.144 ,attemped at least 5 times to log in to my account yesterday.

A very quick google search has that IP origin as Russian ?

Hi Mate,

If the address wasn't spoofed (I am assuming you got AB to check the logs?) then the IP in question is:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#

% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '188.143.232.0 - 188.143.232.255'

inetnum: 188.143.232.0 - 188.143.232.255
netname: LeonLundberg-net
descr: net for dedicated server client
country: RU
admin-c: LL4959-RIPE
tech-c: LL4959-RIPE
status: ASSIGNED PA
mnt-by: MNT-PIN
source: RIPE # Filtered

person: Leon Lundberg
address: Liljerum Grenadjartorpet 71
address: 173 57 TOMTEBODA
phone: +467348510378
nic-hdl: LL4959-RIPE
mnt-by: MNT-PINSUPPORT
source: RIPE # Filtered

% Information related to '188.143.232.0/23as44050'

route: 188.143.232.0/23
descr: Route to PIN
origin: as44050
mnt-by: MNT-PIN
source: RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.60.2 (WHOIS1)




i will try and investigate more, and i know this threat is ever present, but just a quick heads up for everyone

So you are correct - it originates in Russia but from its inet description appears to be part of a pool of static IPs allocated to dedicated servers in Russia. That particular IP is not listening on any ports so quite likely an address that has been hijacked.

Jas

[threedogs]

I get emails daily from Combank, NAB, Telstra all telling me to change my details'
Not a fairies fart chance in hell would I change my details.
Even had them from PayPal as well, First thing you need to ask why are they asking me to change my details.
Your answer should be to take my money, Your passwords etc login details are yours and yours alone, you DON'T share
these details with anyone, even wife or kids. ITS NOT THEIR BUSINESS

[NissanGQ4.2]

Someone with a IP address: 188.143.232.144 ,attemped at least 5 times to log in to my account yesterday.

A very quick google search has that IP origin as Russian ?

i will try and investigate more, and i know this threat is ever present, but just a quick heads up for everyone

Steve, It wasn't from Russia. I have fake IP addresses bouncing all over the place and it just picks a random IP addy each login attemp. Remember that Nissan Patrol screen saver.................................

[mudnut]

I logged on here the other day and my password appeared as letters, not dots, so do you think I was hacked or not?

[growler2058]

Steve, It wasn't from Russia. I have fake IP addresses bouncing all over the place and it just picks a random IP addy each login attemp. Remember that Nissan Patrol screen saver.................................

Bwahahahahahahhhahahahaha


Sent from my iPhone using Motorculture mobile app

[NissanGQ4.2]

I logged on here the other day and my password appeared as letters, not dots, so do you think I was hacked or not?

No mate, sometimes that just happens.