I believe I’m being hacked!!!! Help
I’m trying to figure out what’s happening because this all started really suddenly and I’m honestly confused.
The first thing that happened was about 2 days ago. Out of nowhere, I started getting a huge amount of random text messages from different companies/services.
A lot of them were verification codes, sign-up messages, or things from companies I don’t even remember using. It looked like an SMS bomb.
After the SMS bomb, someone tried to order a GPU through my Amazon account. Amazon caught it and cancelled the order. That was the first time I realized someone might actually have access to one of my accounts rather than this just being random spam.
Then, after the attempted GPU purchase, I started noticing people trying to log into basically everything. I started getting login/security alerts across multiple accounts, and my Microsoft account ended up being compromised.
The Microsoft situation has been especially stressful because I no longer have access to the old phone number on the account, and when I tried to update the recovery/security information, Microsoft said it can take around a month for the security information to update. I already talked to Microsoft support, but they basically told me they can’t bypass that process.
I also ran Microsoft Defender on my Windows 11 PC because I was worried I might have malware. It detected a threat, but it says the threat was blocked. I’m still doing scans/checking the computer because I don’t know if that’s what caused all of this or if my information was leaked somewhere else.
Then today something even weirder happened. I opened ChatGPT and there was a conversation/message in Russian that I absolutely did not send. The message was a completely coherent question about having a game and wanting to use AI to turn game artwork into animations/video assets. I don’t speak Russian and I have no reason to ask anything like that.
I immediately changed my ChatGPT password, logged out of all sessions, and enabled 2FA.
Also, someone messaged my boyfriend on Instagram today with a strange message about me, supposedly from India, and I have no idea if that’s related or not.
I genuinely don’t know what to do. I am not that good with computers and this has never happened to me before.
Timeline:
● 2 days ago: sudden SMS bomb with tons of random company/verification texts
● After the SMS bomb: someone tried ordering a GPU through my Amazon account, but Amazon caught and cancelled it
● After the GPU attempt: login attempts started happening across multiple accounts
● Microsoft account was compromised
● Windows Defender detected and blocked a threat
● Today: a Russian ChatGPT prompt appeared that I did not send
● Today: suspicious Instagram message sent to my boyfriend from an unknown account/location
I’m changing passwords, enabling 2FA, securing my email, checking account sessions/recovery info, and scanning my PC.
Has anyone seen something like this before? Does the order of events point to anything specific?
I’m wondering if someone got access to my email/passwords, if my information came from a data breach, or if this could be something like an infostealer/session-cookie malware on my computer.
Also, could the SMS bomb have been meant to hide the Amazon purchase attempt or some other important security alert in all the spam?
At this point I’m mainly trying to figure out what I should check next to make sure whoever is doing this no longer has access to anything.