u/TheTbone2334

Hello everyone!

This is not a post asking for help, but to understand what has happened on a technical level.

I was infected a couple of days ago, my Subreddit has been hijacked and attackers gained acceess to my reddit account. A week ago i saw Chrome reporting an extension was removed because it allegidly Contained malware, which i shrugged of as issue solved but Was proven wrong.

Attackers had still access to my account AFTER i Reset the password and activated 2FA which logs out all other sessions usually. Was the malware at this point still active or did they just have my Session cookie?

I needed to remove my passkey for them to loose access, yet i used 3 AV Scanners (Windows defender, malwarebytes kaspersky) as well as 2 adware cleanerw (Malwarebytes, kaspersky) which all returned nothing.

There wasnt even an attempt to get into my Gmail acc. I confirmed by looking at IP Logs.

I have since deleted all extensions, deleted all Browser cookies and changed Passwords from a clean device. I would just like to understand what happened on a technical level and why there wasnt even an attempt to get into my Gmail or amazon account.

Hello everyone! As many of you may have noticed, we were under attack. My account was compromised, i hope no one of you fell for the scam attempts over the weekend!

The issue is now resolved my account has been recovered and safer than ever. I am incredible sorry this has happened, i downloaded a malicious chrome extension which lead to the attackers overtaking this sub.

Thankfully due to reddits friendly and competent admin team, the issue was resolved as soon as they could after the weekend.

Thank you to anyone who sticks arround and participates in the community, and again an apoligy from me! I didn't take reddit account security serious enough and was proven that even people who do otherwise good cybersecurity practises, can be infected. Stay safe!

Hello I need help by an admin.

I am the founder and head mod of r/YugiohFMR a small subreddit about a PS1 game. My account has been compromised a couple of days ago and attackers have booted me from my own sub to make scam-advertisments in there they deleted now maybe from reddit itself.

I tried to contact via mod mail, but i have only gotten general tips from a bot on resetting my password and how to adopt an unmoderated subreddit. I am in desperate need of contact to a site admin. Please help.

I have since resett my password, disabled my passkey, disabled ande deleted all my extension which i assume was the vector of infection and enabled 2FA. I have since full access to my account again and no am relatively confident the compromised session-cookie is invalid.

Please help.

My sub is
r/YugiohFMR

I have been kicked out of it as well as my co-mod. So far nothing scammy has happened. Please i need help.

I have added 2FA to my account now via phone number and authenticator app.

Edit: Authenticator app was also put in place.

Hello everyone! Unfortunatly our main mod is taking a break and its not sure if she will be coming back.

If you are intrested you can reply here or send a modmail, I'll get back to you swiftly!