Answers...

to commonly asked questions.

Tricked, not hacked...

Here's yet another example of the strategy bad guys use to trick you into giving up your username and password to any given service. Then they proceed to try that username and password on other services like Amazon, PayPal, random banking sites, eBay, and so on in hope that you use the same combination on multiple accounts.

Common email received:
Screen Shot 2017-01-15 at 6.26.54 PM

Now click on the far right side of the email address to see who it's really from:
Screen Shot 2017-01-15 at 6.26.08 PM

Now hover your mouse over the link in the email to see where you are really being sent:
Screen Shot 2017-01-15 at 6.24.04 PM

So let's say you fall for it by clicking the link. What happens next? They take you to a page that looks exactly like eBay with one very important exception. It's not. Here's how to tell:
Screen Shot 2017-01-15 at 6.23.51 PM

Notice the URL address? That's not eBay. Moral of the story is don't trust the email links. If you feel it's really important, type the website address in yourself in your browser.

This image is a theme.plist hack