Craigslist - I may have been hacked - help!

[keep's keeper]

For all you computer guru's I sure would appreciate a little advice. How do you know if you have been hacked or not? I placed an ad on Craigslist last week and by Sunday I received the following notice:

Dear member,

It has come to our attention that your Craigslist AD had been flagged
as miscategorised.

Please update your ad: http://doiop.com/crg-flagged-manage-posti5453655

Please update your AD in maximum 24 hours.
Approximately 98% of postings removed are in violation of craigslist
posting guidelines.
Please make sure you are abiding by all posted site rules,including
our terms of use.
We apologize for the inconvenience but we want to provide you with the
best services.

Please update your ad: http://doiop.com/crg-flagged-manage-posti5453655

Thank you for using Craigslist!

Long story short, some strange things happened on my craigslist account, like an ad placed on it that wasn't mine. There is more to my craigslist fiasco but I'm not gonna tell it here cause i'm not sure if it is relavent or not.

So I have updated my protection and ran scans...but how do you know if you have been hacked or not?

[blacksunshine]

that is called phishing...

hopefully you did not click that link and log in with your craigslist info...

go directly to craigslist and see what your account info looks like....AND CHANGE YOUR PASSWORD ASAP....

typically they send you fake links and info like you received trying to get you to click their link and log in to what looks like a craigslist or whatever the case may be website....then they now have your legit login information to exploit...

go directly to craigslist and check your stuff...change password IMMEDIATELY...

[runnin2live]

I love those emails-they are so tricky-bunch of jerk offs

[Snakelover]

Ignore it. That's not from Craigslist. This is the real Craigslist login page...

https://accounts.craigslist.org/

Note different URL and WARNING!

[Leftridge]

did you go to that website listed??? Did the Ad get pulled for real? My fist thought was it was a phishing email trying to get you to divulge your user name and password on a site that "looks" like craigslist but isnt.

[Big Spec]

do not click on those links to sign into your craigslist account. Go to Craigslist and logon like you normally would. It is the links that are infected or send you to a sight that when you login they have your username and password. Same thing when you get something like this from ebay or paypal.

[Fishndude]

You're not selling your Gheyhound are you!?

[keep's keeper]

That's what is kinda confusing to me. My ad did get pulled. There is another ad I did not place on my account ( I deleted it). And I honestly don't remember if I clicked on the link the first time I got it or not. I did click on it today but did not enter any password info.

I'll definitely change passwords. But if someone hacked the craigslist account they just have access to that right? I mean, they can't get into all of my computer can they? Maybe that's a stupid question but I'm feeling kinda violated right now.

[blacksunshine]

That's what is kinda confusing to me. My ad did get pulled. There is another ad I did not place on my account ( I deleted it). And I honestly don't remember if I clicked on the link the first time I got it or not. I did click on it today but did not enter any password info.

I'll definitely change passwords. But if someone hacked the craigslist account they just have access to that right? I mean, they can't get into all of my computer can they? Maybe that's a stupid question but I'm feeling kinda violated right now.

hopefully if they were in your craigslist, that is all they got in to but you have to ask yourself how they did that...ie, I would bet you did click the link and log in which is how that ad was placed....that said, it does not mean that is exactly how it happened....it could have easily placed a keystroke logger or other trojan or back door proggy on your computer...so then that can open a whole new can of worms.....

you need to run the gauntlet of combofix, root kits, avg, housecall, superantispyware and the like if you don't know or cannot explain how an ad was placed in your craigslist account....

[keep's keeper]

You're not selling your Gheyhound are you!?

oh you just THINK your funny!

[keep's keeper]

hopefully if they were in your craigslist, that is all they got in to but you have to ask yourself how they did that...ie, I would bet you did click the link and log in which is how that ad was placed....that said, it does not mean that is exactly how it happened....it could have easily placed a keystroke logger or other trojan or back door proggy on your computer...so then that can open a whole new can of worms.....

you need to run the gauntlet of combofix, root kits, avg, housecall, superantispyware and the like if you don't know or cannot explain how an ad was placed in your craigslist account....

I did run a spyware and virus check today. They didn't pick up anything. Don't have the others so I will look into them. Thank you.

[Tmag]

You're not selling your Gheyhound are you!?

She's got a bus? What year is it?

[keep's keeper]

She's got a bus? What year is it?

Reference to another thread.

See! I'm not the only one who didn't get it.

[lonestar8839]

Got the same thing bout a month ago while trying to sell my truck. I canceled the account and changed the password to my email address. I'm done with craigslist now. Sold my truck on here in just a few days.

[blacksunshine]

odd thing is I have been on craigslist for years....never had this happen....

what email service were you two using?