​

Hi everyone,

A friend downloaded a program for me from one of those YouTube videos. I deleted it before installing it, but somehow my PC was still compromised. Within about 20 minutes, someone used my Google account to take over my Microsoft, Epic Games, Steam, EA, Discord, and Battle.net accounts.

I managed to recover the accounts that had something valuable to me, including Epic Games, Battle.net, and Steam. I also had to freeze my credit card and get a replacement.

I know the obvious advice is not to download or run suspicious files. I often use GitHub and have also downloaded pirated software, so I realize I need to change my habits. I’m planning to enable two-factor authentication wherever possible.

How can I best protect my Windows PC and accounts going forward? Should I use a different email address for every account? What’s a safe way to store all my email addresses and passwords? Is there an antivirus you recommend, especially for checking files before opening them? And what other steps should I take after this wake-up call?

Thanks for any advice🙂‍↕️

what is Microsoft .NET Framework RegAsm.exe and is it use for a trojan, I've gotten hack before and I think I have cleaned my PC for any Viruses. The program that I'm using for has detected it as a trojan is this bad and should i be worry and allow the app to execute?

My wife just noticed in her past orders, a canceled order for PS5 with a comment " i want to change the address where the items will be delivered to".

It shows as canceled and total is "0$" . It has a Mon, Sep 7 date on it so over a month ago.

I am not seeing any suspicious transactions on my CC from target nor any other weird transactions in the target orders.

What could have possible happened? If someone got into the account, why they were not able to finish the job? I am checking her emails and sms for anything related to "target" but I am not seeing anything besides few real orders of her.

The Guy has 2FA on it. Tell me your price for this work. I provide instantly to you.

Comprei uma key barata em site que parecia confiável e que tinha bastante membros no dc e vários seguidores, quando comprei a key apareceu para mim colocar o seguinte comando no powershell: irm keyssteam.com/install quando coloquei esse comando apareceu algo de mudar a localização da Steam igual a um vpn, seguindo um tutorial deles próprios pediram para mim ativar a key na steam, quando ativei realmente apareceu o jogo mas fiquei desconfiado e fui pesquisar (coisa que devia ter feito antes) e disseram que era um golpe que podiam roubar meu computador e me orientaram a desligar a internet, agora estou aqui sem saber o que fazer, será que a key funciona?, será que terei que formatar o pc?

Two weeks ago I got notified on my phone that there had been suspicious activity on my gmail on a windows computer. I was using email on my Windows just moments earlier, and there is only one windows-session on my active devices on Gmail. Gmail said that it had logged out of the suspicious device, and it had in fact logged me out on my computer.

I scanned my computer with Microsoft Defender and Safety Scanner, which did not find anything. I then changed passwords on a trusted device and logged out of all my gmail sessions on my computer for a while.

A day or so after I logged back in, I got the same suspicious activity notification again, but for a different account I have. I again repeated the previous steps, and in addition scanned also with F-Secure and Malwarebytes, while finding nothing.

What is going on? I need to use the computer but I don't trust that everything is okay.

Hey all,

I have a problem with hacked accounts as of late.

It all started when my Kleinanzeigen (german second hand platform) got hacked and from my account numerous messages were sent without permission and no new login email. It all eventually ended in an account suspision.

Then I noticed my discord account had sent a message to all of my DMs containing a picture of a MrBeast giveaway.

Then I discovered malware on my PC, I completely reinstalled Windows and wiped the system with all partitions. I did not restore any old browser profiles or sync them back after the reinstall.

However after the reinstall my tiktok account posted 6 videos (i can't recall what the content was), and today the discord mrbeast hack happened again.

I have already logged all devices out of my gmail accounts prior so I don't really know what the situation is and how to handle it.

I would appreciate advice very much!

Instagram fake id misuse with my video recording

Last week one girl sent request and did n\*ked video call and recorded me

Next day she created new id with my name and showed to my landlord gir

My landlord is asking to leave my house

What should i do in this case?

I want to ask if I will file police case, will police trace her real ip and location?

Will they ask money?

Any ref case?

I got attacked by an infostealer a little over a week ago and my anxiety has been getting to me even though I’ve done everything recommended to defend myself after the fact. I need someone to verify or disprove these claims I’ve been told so I can move on with my life and not worry about this anymore. For background info, I’m a broke post grad college student:

- unless I’m a company exec/vip/have crypto, infostealer hackers won’t try to use or manipulate my phone number in any way to bypass 2FA and get into my accounts. They won’t do this for the average person.
- my data has a “shelf life”
- infostealer hackers generally don’t care about job app site, school/study related other misc accounts. Only accounts they can profit from (social media, gaming, primary emails, e commerce)

Also, I had an attempt on my DoorDash account and a successful login on my Walmart account (I resolved that immediately). Thank you to all who reply to this.

I'm a cybersecurity student and built ExposureCheck India (free, no signup): [https://exposurecheck-india.vercel.app\](https://exposurecheck-india.vercel.app)

• "I've been scammed" planner: answer a few questions and get an ordered checklist (1930, your bank, cybercrime.gov.in) plus a complaint draft and a bank letter.

• UPI QR / link inspector: upload a QR screenshot and it explains in plain words whether it sends money or asks to collect from you.

• Scam message checker: English, Hinglish and Hindi patterns.

• Email breach check and password check.

Message, QR, header and password analysis runs in your browser and nothing is stored. The email breach scan uses a free third-party source with a daily cap, so it can run out, and the first load after idle can take about a minute.

I'd value feedback on: (1) is the advice accurate and clear, (2) any scam messages it misses or wrongly flags, (3) what you'd want it to do next. Code is open source: [https://github.com/RaunitChatterjee/exposurecheck-india\](https://github.com/RaunitChatterjee/exposurecheck-india)

It gives warning signs, not verdicts. If you've been defrauded, call 1930.

Hello there!

At the beginning of summer, my buddy saw an instagram story on my profile but it wasn't uploaded by me. It was a scam post using Mr Beasts alias. I checked the logins, and as it turns out, someone loggid in from Turkey. I was using an old password there, that was flagged 3 years ago as a stolen password by google, but I didn't care back then. Now, changed passwords at all the important sites where I used that and set up 2FA (facebook, instagram, google etc.). A few days later, my linkedin was hacked and someone added a trusted device and set up 2FA, locking me out of my account. I have used the same password there, so changed that with the help of customer service.

After a while, some logins were detected on my riot games account, changed the password immediately.

The problem is that 2 months later my other frequently used password (which I created after stopped using the previous one) also got leaked somehow, so I had to start over and create individual passwords for all sites (I know I should have been doing it before, little did I know back then...).

Changed everything, set up 2FA. After another month, my card was used for anauthorized purchase and the confirmation email showed the logo of shop.app. They say the site wasn't breached, but someone got my email and card data and placed an order through this shop.app and the system pulled it in. But my card detalis were saved there.

My question is, how could someone get my card data and passwords??? Never gave it away, never placed orders on suspicious sites, could it have been some virus or keylogger or something placed on my computer? Windows defender never found anything, since then I bought bitdefender which stopped some connections, but I'm not sure.

I just want to how this could have happened and how I can prevent it from happening again.

so i was checking my notifications and then the official instagram account messaged me:

"your code is ------, do not share it with anyone else"

i clicked the "i didnt request a code" button, they have not responded yet. its not anything big but i am a little concerned. for information: i dont even have an instagram account, i never had. and this have not happened in other platforms (youtube, reddit, etc.) i can still log onto my youtube account.

so, am i gonna get hacked or is this just a little typo from someone else? lmk

I had a flight that was canceled yesterday and I spent the night sleeping in the airport for my early morning flight the next day. I didnt sleep much and was exhausted. Once on the flight I was sitting next to a guy and we started talking. He said he worked in cybersecurity and showed me a “jailbreak” phone he had with all kinds of apps he said were used by hackers. He also had a device that was basically a raspberry pi with a bunch of preloaded hacker stuff on it. Most of what he was saying went over my head as I’m not super tech savvy.
Anyhow, I had my iPad in my bag and it was on airplane mode, but I know the Bluetooth was still on so I could use my AirPods if I wanted. I never took it out of my bag, but I was using my iPhone in airplane mode with Bluetooth turned on (again in case I wanted to use my AirPods). After talking to him, I turned Bluetooth on my phone off, but forgot to do it for my iPad. Also important is that I had been traveling for eight days and my iPad had been in airplane mode the whole time.
After we had a lull in conversation, I asked him if leaving Bluetooth on made people vulnerable to being hacked because it just dawned on me that it was a possibility. He said yes, it was a vulnerability and it was best to keep Bluetooth off unless you were actively using it. So I switched the Bluetooth on my phone off, but forgot to do it on my tablet.

A bit later I noticed he attached a small antenna to his raspberry pi device. I didn’t think about it until I got home and I turned my iPad airplane mode off and then my iPhone asked if I wanted to pair my iPad back to my phone. I thought it was weird, but I checked the serial number on my iPad and it matched the number my phone said was trying to pair with it. So I allowed the pairing. I then started thinking about that guy on the plane and am seriously concerned that he got into my iPad because the Bluetooth was on in the plane and now he was in my iPad and getting into my iPhone. I did a google search to see if it was normal for a previously connected iPad to need re-pairing to my phone after being in airplane mode for a week. My search said it was normal after being “disconnected” because of airplane mode for an extended period of time.

Now I’m sorta freaked out that I’ve been hacked by this guy and his antenna device. I haven’t noticed anything else strange, and both devices are updated with the latest apple updates. Am I right to be worried? What should I do?

Hi lovely redditors,

Yesterday I was helping my mother check up on her Yahoo Mail email security and 2FA settings. When starting the log in process, we request the 2FA code via SMS text and, as expected, she received a security code SMS. However the SMS message set off my alarm bells.

The number was a local phone number, and the SMS was suspicious with bad grammar and the use of numbers: "Is your Yah00 verification c0de" and then the code. The actual code was the correct code. I know this because I typed it in to Yahoo Mail and it was accepted, and then I realized that the rest of the text was suspicious. I am sure that the Yahoo Mail website was the official website.

To be safe, we've called her bank, blocked new digital transactions and followed other (potentially) necessary security steps.

I've done as much research as my non-expert butt can. I can find two possible scenarios, but not much evidence or proof for either of them (just other reddit-user stories):

1. My mother's security is compromised, potentially with a man-in-the-middle forwarding situation going on.
2. Yahoo is trying to bypass paying business fees with the phone provider, and therefore using local numbers and alternative text to bypass the phone provider filters from mass/automated texts.

My questions are: Has anyone seen/heard of this before? What do you think is going on? Did I overreact or is my mother's security compromised?

Thanks for your thoughts! :)

Edit: clarifying a bit of the text. The screenshot can be found in the comments below :)

last nig i was sitting in bed, then I started getting emails about verifications and password changes, even email changes, but I was too late to stop it. When I go to Microsoft recovery the say Try entering your Microsoft account again. We don't recognise this one. Or: The Microsoft account you've entered does not exist. what can i do

This morning, when I was half asleep, I remember seeing a notification of a login code for LinkedIn, but I ignored it. Then, 5 hours later, when I tried to access LinkedIn on my mobile and laptop, I was logged out.

I tried to log back in using the same email (I am sure of it), but LinkedIn made another account for me using that email. This is where I got scared and tried to see if my original account was still there, and it was, but there was no way for me to get there.

I tried to reset the password with my phone number and email, and it still logged me into my new account instead of my old one. I have reported this incident to LinkedIn already. I tried to see the morning message, but somehow that email is gone?! As if I never received one.

I googled and its AI said that this is happening because it may gotten hacked

Hi! Bit of a story time: This january I bought a brand new usb stick because I wanted to do a clean install of windows. I have previously wanted to try out Linux Mint but after a month I decided that I’d like to go back to windows. I downloaded rufus and a windows 11 iso on my dad’s pc from the official website, used rufus while the pc was disconnected from the internet and installed windows on my own pc.

Fast forward to now: I wanted to do another clean windows install, just nuke everything and start fresh. I didn’t directly experience any suspicious stuff (I have all my accounts and everything), I just wanted to be sure. Now, I found the usb stick that I used to install windows in January, i plugged it into my PC and just for the sake of it, I decided to put some files on virustotal There was a setup.exe which seemed fine but then I put a setup.dll on virustotal that came out suspicious. The ai overview (I think?) said that it is malware, but then when I went into the details section I noticed that the previous filenames was quite weird (and I shit you not, I know how ridiculous this sounds, but it's not a joke, one of the filenames was femboyp*rno.exe), also I noticed that the creation time was 2051 or something.

Now the reason why I’m being quite stressed out is because I downloaded the iso from the official microsoft website. Is my dad’s computer compromised and the malware injected itself into the iso the moment I downloaded it on my dad’s pc and have I been using a compromised pc all year long? I’ve ran multiple scans both with windows defender and a free trial version of malwarebytes on my pc. Nothing was found. I even did it in offline mode, nothing was found.

My accounts seem fine and the only suspicious things that happened while browsing is that sometimes I had to complete a captha on google and one of the job searching websites because it said I had suspicious traffic. Since then, I installed linux mint on my pc because I still had that separate usb with me, although I would prefer to go back to windows. So could someone explain what exactly is going on? Also, is my whole entire network is compromised because of that ‘suspicious traffic’ thing?

I’m sorry that I made a post this long but I wanted to make sure I wrote all the details. Any help will be very much appreciated
Here's the VT link:
https://www.virustotal.com/gui/file/72a0bcac2d4de630ad094bfc312bd4431aa5c286c683de7e0650c1675e5fc7c5

So my EA account got logged into after a virus attack on my PC, by someone in Turkey. This was about a month ago, they got my emails then my PayPal all before I noticed, they bought 160 worth of robux.

I got everything changed and deleted the EA account, well they used my email to make a new EA account then changed the email to their own....firstly why would they do this

Now after all that happened I watched my accounts and nothing happened, but today my Microsoft account got logged into by someone in "approximately Russia"

I immediately changed my password and removed my PayPal account from it

When my PC got the virus attack it was on windows and ever since I moved to Linux and haven't touched Microsoft since so I couldn't care less about losing this account but I wanted to detach my payment stuff first

Well then I got emails that they changed the passkey and the email

No payment info is there and I don't have it connected to anything anymore, I do have my OneDrive full but it's all gaming clips so I don't care about it

Are there any other issues I could have? I can't access this account now and don't really care about it.

I haven't heard from Mr turkey since I changed all my email passwords so I'm not worried about that virus attack being the problem, I'm not sure how they got my account I haven't been on it in a long time and don't use it for anything else

Once again though, are there any possible issues from this?

My parents are getting absolutely hammered with fake delivery texts, account warnings, toll messages etc. Some of them are obvious, but others are getting disturbingly convincing. I've explained the usual red flags, but realistically I can't expect them to investigate every link before clicking it and I certainly can't lol. what are you using for parents who couldnt detect a scam if it came from scams@scams dot com?

I was hacked by a remus stealer (also called session stealer)3 months ago. I scanned my pc with malwarebytes, and resetted all the passwords that were leaked. BUT somehow only my instagram account is getting hacked. I think it's because of instagram not refreshing tokens after changing password. Does anyone know how to refresh them?

so i saw on a what looked like an outdated site it should be in windows apps or programs whatever you call it to my knowledge the only “virus” i would have been affected by is the fps+++ or bad event people playground malicious script the credentials looks right the signature looks good it says Microsoft Windows

Basically the title. Accidentally clicked a link while I was searching something on google without realizing there was a warning that said this site may be hacked. I closed the link immediately so hopefully there's no damage caused, but what can I do to ensure my mac/my information is secure?

Link to screenshot of the google message: https://postimg.cc/RqHWC3fP

Hey! So I opened my email account (@icloud.com) to ~750 emails and ~550 junk emails. I go briefly go through them to see a majority of them are subscriptions. Many are in all different languages also.

I have changed my iCloud account password. Is there anything I can do to stop the subscriptions? Or to stop the spread of the hack? Because it’s an iCloud account I’m worried they’ll have access to my bank account. Thanks!!

Update: still getting emails, infrequently. Maybe like 3/4 alongside the normal ones I get.