(1) SUMMARY
- So far about 80 cases are known, without authorization from PayPal accounts in which funds (usually € 49.99 or € 99.99) be charged or paid to the following 3 companies were:
- Frogster Online Gaming GmbH (formerly Yusho GmbH)
www.frogster-online.de ( link) or www.yusho.de ( Link )
This company has based in Berlin ( source )
- NCsoft Corporation, www.plaync.com ( Link )
This company seems established to have in the UK or the USA, as site is registered to an address in Texas, but the imprint also UK was mentioned
- Gameforge Productions GmbH
This company is based in Karlsruhe ( Link )
- Frogster Online Gaming GmbH (formerly Yusho GmbH)
(2) APPROACH AND SOLUTION OF THE PROBLEM
- This sequence is almost always the same. To report the matter to PayPal, it is validated and you get the money credited back to their PayPal account. Here, the situation usually arises that the amount still first to the bank account or a credit card stored in PP will be deducted and the amount that you get credited by the PP then be transferred to his account must have.
- Note: If the bank account has insufficient funds, there can be returned direct debit fees. This may also appeal to PayPal.
(3) outstanding issues
- As one / several unauthorized person or persons to our PayPal credentials come from?
We can unfortunately not yet know if this hacker, player (possibly customers of the companies mentioned above) or the firms themselves responsible. This is why I distance myself from unverified accusations against all polluters may come at the matter in question. When we are seeing no evidence so far is not known by whom everything was created.
- who has abused our credentials?
It must have been a trojan or keylogger, our data may have been a payment process on a different site does not properly encrypted / secured.
A few of victims have reported that they recently only payments for online gaming provider Zynga (eg facebook offers games such as Farmville or mafia wars on) with your account have done. There are already articles in world online and Focus .
- New information from 07.03.2010:
In forums at eBay.de is since September 2009 reports on such cases ( Theme 1 / Theme 2). Most evidence suggests that those who have hit your account, use the money to games / licenses and gambling money to finance etc.. This game-won extensions are then sent to a larger account representative or directly sold on eBay. An example of such a trade as this is eBay Store - this is just one example. I assume that this Invite nothing (just a random example), I just wanted to show what benefit a fraudster in these cases may have.
(4) HOW MANY CASES ARE KNOWN? WHO IS AFFECTED?
- I have a list of all known victims have been created me (on my PC). Currently this list looks like this:
Frogster Online GmbH: 22 known cases (previously known sum € 2,299.77)
NCsoft Corporation 51 known cases (previously known sum of € 5,952.75)
Gameforge Productions GmbH: 3 known cases ( previously known sum € 599.88)
After victims of their PayPal accounts, money was transferred to Gameforge I've ever researched yet not at all on the web. These cases are only part of the known cases. I suspect that the real number of cases and the sum is greater by far than that.
All I know of victims come from Germany. Here are some links to discussions:
forum.chip.de/recht/unzulaessige-paypal-abbuchung-frogster-1344199.html
rokop-security.de/index.php showtopic = 19 738 computerschutz.net
/ malware/2916-paypal-konto-gehackt.html
beisammen.de / board / index.php? page = Thread & threadID = 102 855
urbia.de/archiv/forum/th-2516406/Abbuchung-von-Paypal-Konto-nicht-von-mir.html
- Most cases happened between October 2009 to date - March 2010th All
today on 07.03.2010 have reported 3 other people.
- Since all live now concerned in Germany, I am assuming that the / n of the charge / from Germany are coming / (which I think is an advantage for us!)
(5) IMPORTANT (!) WHAT TO DO?
- If you also want to know who has abused your account and how he comes around to your data, just contact me via email ppbetrugsopfer@gmail.com
- If we are in contact , we can enjoy talking together about it (as in the e-mail distribution can then read any), as we proceed. There are many possibilities, here I am talking about both criminal and legal methods and by actions such as a summary of all transactions, billing and customer numbers in our billing.
- It would be very hiflreich if anyone could tell whether he has used his PayPal account lately and if so, what kind of party they were. You do not mention exactly where exactly did you use your account, it is enough if you say whether it was an online shop or a payment for a game, etc. So we can possibly find out whether a particular online service, with our confidential carelessly access is handled and has given someone access to our data.
Thank you for your help and hope to report as many people. If it assists, I also like to invest my time to figure out who is behind it!
I have taken several hours time, stakeholders searched on Google and set up this blog and a new email address just for this cause - please get in touch!
UPDATES
started 2/27/2010 Blog
28/02/2010 2 more have injured themselves known someone
01.03. 2010 2 more have been injured by someone reported
02/03/2010 3 more are injured are reported by email
03/03/2010 sub-item (4) other links mentioned
03/03/2010 2 more have been injured by someone reported
03/04/2010 2 more injured are reported to have someone
03/05/2010 1 further damaged someone has reported
03/06/2010 2 more injured are reported to have someone
07/03/2010 3 other injured have been notified by email
07/03/2010 result of an investigation: a total of 80 injured found