My Amazon account was hacked today by two different countries through Firefox. I have never had a problem with Internet Explorer, or Edge. So I suggest you not use Firefox to use your Amazon account. I hope this helps people to see what not to do.
 
Here's the info:
 
Thanks for visiting Amazon.com! Per your request, we have changed the e-mail address associated with your account
The e-mail address associated with your account has been changed. The old address was ***************. The new address is gorshkovxpp1981@mail.ru.
Visit Your Account at Amazon.com to view your orders, make changes to any order that hasn't yet entered the shipping process, update your subscriptions, and much more.
Should you need to contact us for any reason, please know that we can give out order information only to the name and e-mail address associated with your account.
Thanks again for shopping with us.
 
1)
 
"We detected a sign-in to your account from a new device.
 
When: September 03, 2020 09:35 am West Indonesia Time
Device: Mozilla Firefox Windows (Desktop)
Near: Central Java Indonesia"
 
2)
 
"We detected a sign-in to your account from a new device.
 
When: September 03, 2020 12:45 am Eastern European Summer Time
Device: Mozilla Firefox Windows (Desktop)
Near: Nomos Argolidos, Greece"
 
 
 
*** I called Amazon to shut down my account. They will call me back when I can resume getting the account setup again.***
 
 
P.S.  That email address if you can't already tell is a Russian email address. It has the (RU) in it.

Thanks for the heads-up, but you better get Adam Schiff and Jerry Nadler on this right away!

Nereus
 
That REALLY sucks. I don't think FF has much to do with it though, other than they happened to be using that browser when they hacked your account. I have 2-step verification for Amazon, which means they will send a text to my cellphone if I log in from a non-trusted device, and I have to enter that code or there's no access. I add 2-step verification to every account I have where it's offered, which is most of them these days. Soon as you get your account back, set it up. Go to 'your account' and then 'login & security' to set it up.
 
 

Good advice. I'll use the two step verification when I get the account back. Probably tomorrow.

Good luck on getting it fixed

Last week I received the most sophisticated looking email ever from a common credit card bank I use suggesting an improper purchase. It wanted me to sign in and all that with the Bank's link included. Normally the email would ask you to contact them.
 
I looked this thing over a number of times, logged on independently to the CC company, and found no activity. So, I looked at the email again and found one of the telltale signs. The month of August was spelled august.
 
The bad guys keep getting better at this and ever since the "Love" email from around '99 or 2000 the lesson learned was never click on a link in any email, never unsubscribe from any email link, never respond to an email link, never let someone use your computer without you watching, and have a good virus protection software that can scan inbound emails or detect a threat should you get tricked.
 
That being said, if you need that Amazon purchase now, just send me your card number and I'll place the order for ya.

Thanks for the info Xray...
 

 
UPDATE:
 
My Steam, and Ubisoft accounts were hacked also. Happened this morning.
 
Next update:
 
Amazon support helped me change to a new Email address, and Password. I'm good to go there. Next is Steam, and Ubisoft.

XrayMan
 
UPDATE:
 
My Steam, and Ubisoft accounts were hacked also. Happened this morning.
 
Next update:
 
Amazon support helped me change to a new Email address, and Password. I'm good to go there. Next is Steam, and Ubisoft.

Good to hear. 
 
I wish you luck with Steam. Unless they changed their position, you may have to work with that one pretty hard...
 
Nereus, great advice above on using the two step verification BTW!!

It's also good to change passwords often. Some people only change them when they notice a problem. If it's been over a year it's probably time to change a password on a site.

 
UPDATE:
 
Well I was able to fix Ubisoft. The only problem site is Steam. No matter what I try, I can't log in. I emailed Tech Support. Hopefully they respond soon. 

XrayMan
 
UPDATE:
 
Well I was able to fix Ubisoft. The only problem site is Steam. No matter what I try, I can't log in. I emailed Tech Support. Hopefully they respond soon. 

Best of luck, though Valve should be able to help you restore the account I'm not sure what you will get back. I strongly recommend using 2FA on your steam account as well via the Steam app. Steam has different rules based on if the security level settings so you may not get everything back if your game inventories or steam funds were cleaned out. The Steam app is super easy to use and will even ping you the code if you attempt to log in so you don't always have to open the app to fetch it. 
 
Nereus is spot on about two-factor authentication, I enabled it on my Amazon, Google, and Steam accounts. In this day and age, it's just way too easy to compromise a browser install, or fake a website, and even legitimate sites occasionally end up running malicious adverts. If there's money attached to the account then it needs 2FA. 

I just added 2 factor for my amazon account, I needed to do that. Also, have you check accounts that use the same or similar passwords, there's a chance they might be targeted. (Also, I take it you double checked your EVGA account? I don't want a mod to be turned into a Spambot, you can't even report or flag those accounts if something like that happens. (though maybe there's some internal extra safety systems in there?)

Dual authentication is a life saver. You got hackers going so far as to clone phones now though for high value targets.

 
   
 
 

Steam guard - associate with phone and use it for 2 factor auth.
 
You are lucky to have recovered your steam account. Boy can that be a PITA. 
 
Good Luck in the future and thx for the PSA.
 
 
Google and firefox store obfuscated but not really encrypted versions of your credentials in %appdata%.  This has been a vulnerability for a while.  A hacker can simply copy the relevant FF or chrome appdata folder to any Windows user profile folder structure and sign in as you. As long as 2 factor is not in the mix...
 
Convenient if you  break your profile and don't want to restore chrome/ff, but inconvenient from the security perspective...