Articles end up in the shopping cart independently, external access?

Bu
- in Xbox
6

Amazon passwords always created locally in the editor, with> 32 digits and symbols, Google 2FA, renewed regularly. Password manager behaves normally.

It seems that digital items (vouchers, game keys, etc.) end up in my shopping cart every month. Also ordered before.

I don't get any information from Amazon or Google about login attempts or suspicious activity. I last changed my password on November 28th, 2020, one day later there's Xbox credit, 100 euro in the shopping cart.

How the hell is that possible? Only I have access to the TrueKey password manager (biometric unlocking), as well as my mobile phone and my PC at home. I don't use Amazon anywhere else.

Mobile phone: Honor View 20

PC: self-made, Asus WLAN adapter

Fritz! Box 7530 newly created for a month

Telekom Magenta at home M

Dr

Articles end up in the shopping cart independently, external access?

Rather unlikely.

Amazon itself is constantly packing items from my wish list into my shopping cart without asking. I always have to be careful that I don't order the things too.

Bu

That has not happened to me before, the MS Flight Simulator was ordered for over 100 euro to an email address that I could not see in the order process. Another time it was Xbox credit, always things that I have never looked for on Amazon or at all.

sw

I have never seen or heard that before. It would be interesting to find out who amazon is doing and who is not.

If you hadn't said that you had never looked at these articles before, I would have mentioned the possibility that someone has sent you a SuperURL that automatically puts the article in the shopping cart as soon as you click the link.

Bu

That took me away. What is a super url? Remember that you need the Google Authenticator to log in

sw

With a SuperURL I can initiate actions and influence the algorithm.

Bu

And so external ones can access my Amazon account without having to enter the newly changed password and the authenticator code?

Perhaps I even unconsciously reacted to an "Amazon" email that slipped in between Christmas orders, phishing moderately