Hacker robbed my Moneybookers account

[PMmarkus]

Some hacker robbed all my money from Moneybookers account. I have different password in every place so I cannot understand how it´s possible. After I noticed that I asked Moneybookers security team to close my account and cancel all money transfers.

I got following answer:

There were unauthorized logins on your Moneybookers account. The account is currently locked and all the merchants, who received funds from it, are contacted. So we are doing everything possible for the moment.

Please send to us :
- Your valid official identification document such as your international
passport, national identity card or drivers license;
- Proof of address such as recent utility bill or bank statement;
- A handwritten declaration that you authorize a Moneybookers representative to change the primary e-mail of your account, where you will receive your new password.

We will keep you in touch

Kind regards,
Moneybookers Security


I made that they wanted and send the required documents and got following answer:

Dear Mr. Juha Markus Nikkanen,

Thank you for the documents provided!

For the fraudulent transactions made from your account was used a credit card MASTERCARD <xxxxx07941> added from the hacker. So there are no loses from your side.
We would advice, that you open a new account with us, because this one is already compromised.

Please accept our apologies for any possible inconvenience and thank you for your time!

Best regards,
Moneybookers Security

After that I made new account and asked could I get my money back now. Moneybookers answer was:

thank you for your email.
We kindly ask you to review your old account and advise us what amount exactly is missing from it .
Thank you for your cooperation.

I said that the amount was little bit under 2000€ and got next answer:

Thank you for your prompt response.
After we have conducted a detailed investigation within our system and contacted all the merchants that have recieved funds from your account, we regret to inform you that there has been a communication error and despite our efforts to arrange a refund, all merchants that have receiveed funds are unable to restore the funds.
Please accept our most sincere apologies about your loss.We would like to assure that we have taken all necessary precautions to avoid such cases in the future.
You may continue to use your new account at any time and enter your new details there.
If you have any further questions please do not hesitate to contact us at any time.

Regards,
Moneybookers Security

WTF? What communication error? I think it´s Moneybookers fail, not mine. I cannot understand that Moneybookers can be so unsafely. Does anyone have any ideas what do I have to do next? I´am really not going to give up before I get my money back.

[kmay87]

That's unbelievable. It also seems like they don't even know what they are talking about, if firstly they tell you the transaction was made using a credit card added by the third party, and then they say all funds in your account were withdrawn.

Either way, they must be able to trace to whom the money was sent. And if their security is any good, they will also log the IP address of where the transaction was made. Was the money dormant in your account or did it come from a credit/debit card? If the latter, you should have protection on that from your bank.

Although I tend to not leave money in any of my online wallets/accounts, I still wouldn't dream of something like this happening. You will probably want to check all the details on your account are correct, as it must be quite a long shot for someone to correctly guess a password, hence there was either some way into your account or a keylogger has been placed on your computer, or maybe a trojan. A virus scan would confirm that.

If it's a fault on Moneybookers' side, then it should be up to them to refund you. I'd say you should keep pestering them until they actually tell you how the breach occured.

[lots0]

Have you checked YOUR computer for any spyware, trojans, rootkits or keyloggers?

The odds are that the security breach that released your passwords is on your side and not on theirs.

[RobWin]

How do you know that this was really Moneybookers you were talking to and not a hacked Moneybookers site ?? You should go back and check the headers in the email that you received from them and also the IP address and then go back and check one from them when you originally signed up to compare the two...

[PMmarkus]

Have you checked YOUR computer for any spyware, trojans, rootkits or keyloggers?

The odds are that the security breach that released your passwords is on your side and not on theirs.

Anti spywares found nothing but I cleared my hard drives as a precaution.

[kmay87]

How do you know that this was really Moneybookers you were talking to and not a hacked Moneybookers site ?? You should go back and check the headers in the email that you received from them and also the IP address and then go back and check one from them when you originally signed up to compare the two...

That's actually a good point. Normally all these places have the same signature after their messages, but in all three of the ones shown, they differ slightly. Personally, I'd be surprised if they didn't use a generic signature, as all casinos and banks etc tend to. Or it could just be me nitpicking

[lots0]

Anti spywares found nothing but I cleared my hard drives as a precaution.

You'll want to do a specific check for rootkits.

check here:
http://technet.microsoft.com/en-us/s.../bb897445.aspx

and here
en.wikipedia.org/wiki/Rootkit

anyone that uses their Windows computer for ANY financial transaction should scan for rootkits on a regular basis, in my opinion.

[gerilege]

Do you also play poker? I heard about a few similar cases in Hungary. Details here:
http://forumserver.twoplustwo.com/28...record-280082/
Do not keep funds on your mb account if not neccessary.

[RobWin]

Do you also play poker? I heard about a few similar cases in Hungary. Details here:
http://forumserver.twoplustwo.com/28...record-280082/
Do not keep funds on your mb account if not neccessary.

After reading that, this is almost starting to sound like an inside job at MB's and also by the response given by them in the email above...

[jas2587]

You'll want to do a specific check for rootkits.

check here:
http://technet.microsoft.com/en-us/s.../bb897445.aspx

and here
en.wikipedia.org/wiki/Rootkit

anyone that uses their Windows computer for ANY financial transaction should scan for rootkits on a regular basis, in my opinion.

what do you do if you scan an it shows things?
I did a scan an it says 660 discrepancies found
I bought this pc new 2 yrs ago an 2 are dated
8-26-2004
but all the others are recent hmmmmm


Thanks
Cindy