I'm in a bit of a tough spot and could really use some advice. Recently, my session tokens or cookies were stolen, likely from a sketchy driver updater or a Chrome extension. This allowed someone to make two unauthorized purchases on my Humble Bundle account, totaling around $500 charged through my PayPal. After noticing the charges, I acted quickly to secure my PC and updated all my passwords, along with adding extra security measures. I've also informed my bank, which removed PayPal from my account.
I filed a fraud appeal with both Humble Bundle and PayPal. PayPal was prompt but ultimately declined my appeal because they stated my account wasn't 'hacked' in the typical sense. They just seemed to approve the charges made from my stolen tokens. It's been over a week, and I haven't received a response from Humble Bundle, except for a brief acknowledgment email. Right now, my PayPal account is overdrawn by $500, which is super concerning. I'm not sure what other steps to take or if there's anything else I can do, aside from waiting for responses. Any insights would be greatly appreciated!
1 Answer
It seems like you might need some legal advice here rather than purely tech support. However, it’s important to know that cookies and session tokens are ways that websites remember you. If someone gets access to those, they can impersonate you on that site. Unfortunately, it sounds like there’s not much more you can do on the tech side since you’ve secured your accounts. I recommend continuing to follow up with the support teams for Humble Bundle and PayPal. They might have more insights for you. Good luck!
Could you explain a bit more about how they actually pulled this off using cookies and session tokens? I understand the basics, but I’d like to know the differences better.