Rapidshare Mayhem

[TheRidDlerX]

Anyone ever experience this? -> Rapidshare suddenly doesnt authenticate in the download manager anymore; When logging into the site itself it says account found but wrong password; When trying the Forget Password option it says wrong email address.... i fear i the friggin account may have been hijacked... hacker changed pass and email... but my PC security is top notch... any ideas? or can i assume the worst?

 

[ReubenL]

Yes, your account was most likely hijacked. Happened to me right after I've launched rapidleech.co.za. I've send an e-mail to Rapidshare (they take about 2 days to respond) but on the 3rd day I've contacted them telephonicaly. They were very helpfull and restored my account. They also have a function where you can secure your account - A red lock means your account is not secured and a green lock means it is secured. Did you perhaps use this function?

 

[TheRidDlerX]

Sigh, no... i ignorantly decided to ignore it because i interpreted the function as 'locking' your account if you would, for example, not use it for long period of ime. If only i read the description more closely i would have noticed the whole 'downloading can still take place' part... :\ Ive read up since and i was most likely hacked... whats been bothering me is how... i guess one of the links i got off the forums may have been bogus. Waiting on 10AM tomorrow to give them a ring as well. Thnx for the reply tho.

 

[ReubenL]

Rapidshare will be able to tell you the IP address of the computer that logged into your account. Perhaps paste that IP here so that other users can block it from their servers etc. Let us know what Rapidshare says

 

[TheRidDlerX]

Gave RS support line a ring this morning and was sorted within minutes. I lost control of the account yesterday at about 3PM, but according to the logs the person got hold of my details as early as Tuesday (if i understand it right). Here's the logs,of which the 196 range is mine :
Sun, 2. May 2010 196.210.196.XXX
Sat, 1. May 2010 196.210.196.XXX
Sat, 1. May 2010 41.185.140.XXX
Fri, 30. Apr 2010 196.215.55.XXX
Tue, 27. Apr 2010 196.210.253.XXX
Tue, 27. Apr 2010 196.210.223.XXX
Tue, 27. Apr 2010 41.185.140.XXX
Tue, 27. Apr 2010 41.185.80.XXX

Hope it helps!

 

[ReubenL]

Gave RS support line a ring this morning and was sorted within minutes. I lost control of the account yesterday at about 3PM, but according to the logs the person got hold of my details as early as Tuesday (if i understand it right). Here's the logs,of which the 196 range is mine :
Sun, 2. May 2010 196.210.196.XXX
Sat, 1. May 2010 196.210.196.XXX
Sat, 1. May 2010 41.185.140.XXX
Fri, 30. Apr 2010 196.215.55.XXX
Tue, 27. Apr 2010 196.210.253.XXX
Tue, 27. Apr 2010 196.210.223.XXX
Tue, 27. Apr 2010 41.185.140.XXX
Tue, 27. Apr 2010 41.185.80.XXX

Hope it helps!

Where is the rest of the IP addresses?

 

[ReubenL]

41.185.140.XXX - This is a Web Africa user residing somewhere in Pretoria (Connection Range B).
41.185.80.XXX - Also a Web Africa user residing somewhere in Vervoerdburg (Connection Range A).

 

[Hemps]

My account got hijacked by a 210. address not so long ago, activated the lock and changed username and password.
He only got 800mb out of me.