r/cybersecurity_help

Hello. Recently I downloaded a few mods into my pc from a game I like to play. Unfortunately the mods I downloaded they had trojan virus. One was a trojan loader and the other one was a trojan renpyloader. I got my discord account compromised because of this. And someone was trying to get into my outlook out too, but they were not able to.

I ran Malwarebytes and Windows Offline Defender. Malwarebytes was able to fine 5 Trojans and quarantined them. I deleted everything from my browsers, deleted the infected archives and I was also able to regain access to my discord account. I also changed my passwords using my phone.

My question is: should I be able use my pc again without any risk or what do you guys recommend. I just don’t know that much about this stuff and I would appreciate if someone could give me some guidance

Hello there! I have recently decided to become more independent with my data, and I bought a UGreen DXP4800 Plus for my home NAS. I am happy with the specs and the overall design of the machine, but I have heard recently that some Chinese companies have, in the past, put backdoors and spyware onto Western-sold tech. They seem like a legit and safe company (as much as a company can be), but I was wondering if anyone has any information on UGreen security audits or any resources that they could point me towards to find out.

I am considering changing over to the open-source OS TrueNAS, but I'd only want to go through the hassle if there are security risks to mitigate.

need to get this off my chest because I’m losing it.

My friend (21F) met a girl on a random Instagram group chat around 11 months ago. The girl seemed lonely and sad, so my friend being the soft-hearted idiot she is, tried to be there for her.

Big mistake.

What started as friendship turned into full-blown possession. My friend clearly said her family is strict and she can’t be on the phone 24/7. The other girl didn’t care. She got more and more controlling. My friend tried to distance herself. Blocked her.

That’s when the real nightmare started.

Multiple fake accounts started appearing

She messaged my friend’s friends and abused them

Posted my friend’s details/photos without consent

Called 70+ times a day from different numbers

Put my friend’s ID in her bio with lovey-dovey shit and refused to remove it

Reached her YouTube and even her book publishing platform and started commenting

After my friend finally told her parents, the very next day she came back harder — publicly slut-shaming her

And it got worse.

She started sending sexual texts.

Then threats.

Kidnap threats.

Knife and gun pictures.

Claiming her uncle is some BJP leader so “nothing will happen.”

We collected everything. Screenshots, call logs, the threats, everything.

We went to cyber cell 5-6 months ago. They gave “suggestions.” No real action.

Recently I personally called this girl’s father. He lowkey defended her and just said “keep blocking.” He promised she wouldn’t do it again.

She did it again. Same day energy. Still dropping abusive texts from new accounts.

My friend works in book writing. This girl even showed up there.

My friend is scared to go to the police properly because she doesn’t want her emotionally unavailable (and cheating) father involved. So she’s stuck.

This has been going on for 7-8 months. Multiple accounts. Threats of violence. Sexual harassment. Professional platforms targeted. Family intervention failed. Cyber cell useless.

I’m tired of watching her live in fear while this person faces zero consequences.

Is this just how it is now? You can threaten to kidnap someone, send weapon pics, harass them across every platform for months, and as long as you’re not physically standing in front of them, nothing happens?What the actual fuck is left to do at this point?

How did someone get into my X account and change my username profile picture header and birthday without changing my password and without me getting any login alert or security warning
I already had two factor authentication enabled and I had backup codes set up too
I’m trying to understand what kind of access could allow someone to make all these changes without triggering any warning
Has anyone seen something similar before?

I really need help. Is there a phone number I can call ? I have lost access to my account, the security email 1 and 2 were changed. Submitted an account request form with every detail correct and everything they possibly could’ve wanted and it got denied and now today as of a couple of hours ago while at work my account email was officially changed. I have absolutely 0 access to my account. The account recovery form does not work because it says “enter your email” and I enter my previous email and that does not work. If anyone knows anything please let me know asap. The worst part is this happened around 6:45 pm Sunday and I submitted a recovery request within the hour and it still got denied. What is there for me to do? I provided the last 4 digits of my card number, old passwords, name, date of birth etc. please help

Ich brauche Hilfe mein Konto wiederherzustellen @microsoft

Mijn e-mail en wachtwoord zijn gewijzigd paar dagen geleden door een hacker. Ik heb al met 6 klantenservices van Microsoft gepraat voor hulp en heb de Xbox recovery form ook al ingevuld. Nadat deze afgewezen is zegt de klantenservice dat ik hun een mailtje terug kan sturen met meer info en screenshots. Nadat ik dit gestuurd heb krijg ik na 10 minuten een mail dat deze case al gesloten is waardoor ik telkens maar weer alles hetzelfde doe. Wie kan mij helpen of heeft ideeen hoe ik dit beter kan oppakken.

i keep seeing people say you need cybersecurity software not just antivirus but i honestly dont know what that means in a practical sense. i work from home and handle client files but im not running a company network or anything. what should i actually be looking for?

Today i did random full scan of my laptop with windows defender and it found one threat

Detected: Trojan:HTML/Redirector.AA!AMTB
Status: Quarantined
Quarantined files are located in a restricted area where they cannot harm your device. These files will be deleted automatically.
Date: 19.08.2026 10:59
Details: This program is dangerous and executes commands from an attacker.
Affected items:
containerfile: C:\Users\adon\AppData\Local\Mozilla\Firefox\Profiles\q1jz5817.default-
file: C:\Users\adon\AppData\Local\Mozilla\Firefox\Profiles\q1jz5817.default-release (GZip)

is this a serious situation? i don't know where i got it from i use ublock on firefox

Basically fucked up a few days ago downloading a game from a site I thought was reputable probably clicked on a ad link. After some research Im thinking maybe it was a session hijacker or infostealer? I say it cz while I was playing something else I opened discord on PC for a split second and closed it and hours later discord got hacked sent DMS of crypto scam and someone tried to get into my Microsoft account too. I turned off wifi, I've reset passwords for all the major services I can think of but I've got some more to go that were saved to my google account but I don't use them often. At least none of the other services have seen any unusual activity yet but I can't rest.

Anyway my main concern rn is while I'm ready to reset my OS via bootable USB, I wanted to save some docs I had on laptop I may need in the future and it would be a pain to get new ones. As far as I remember it's photos, documents, pdfs and not any programs so is it safe to move to a different USB beforehand?

Also as part of the USB wipe do I need to have the drivers for the device separately on the drive or the windows installation will handle it?

Thank you in advance.

Using TikTok or instagram for example and a link is clicked that opens INSIDE the app. Can company WiFi see the specific website that was visited on an iPhone with NO certificates installed.

Pretty much the title. I'm wondering if there is any possibility of getting hacked by just opening e-mails or replying to them?

Because a certain business owner is known to reply to every e-mail but will he not face any risk if that's possible?

Today I received an SMS from Moneyview saying that a loan application was submitted using my mobile number . I did not apply for any loan.

I then opened the application and saw that the KYC details belong to another person, including his Aadhaar details and photo. I obviously don’t know this person.

The confusing part is: how was my mobile number verified? If Moneyview requires an OTP, how could someone create/use an account with my number without having access to my phone?

I also received a CIBIL SMS saying that WHIZDM FINANCE checked my CIBIL report today, which makes me more concerned.

Could this simply be someone accidentally entering the wrong phone number, or is there another way this could happen? Has anyone experienced something similar with Moneyview?

I’m contacting Moneyview to cancel the application and delete the account associated with my number. I have screenshots of the application and SMSes.

In the past few days I've received two separate confirmation emails for accounts/bookings I never created:

An account confirmation

A restaurant/venue booking confirmation, with a phone number attached that isn't mine

Both were sent to my Gmail address, but interestingly, in both cases the sender/booking system used my address WITH a dot in it (e.g. my.email@gmail.com), while my actual address doesn't have the dot (myemail@gmail.com). I know Gmail ignores dots, so technically these land in my inbox regardless.

My address isn't a common name combination, it's fairly specific, so I'm surprised this has happened twice in a short window. Is this just coincidence, or could there be a data leak/breach where variations of my email are circulating, or some kind of enumeration attack happening? What should I actually check on my end (password reuse, breach checkers, etc.) to make sure my own accounts are safe?

I did something really stupid and now my axiety is sky rocketing, I downloaded jdownloader (from the org website), but then i saw ppl in a thread saying it actually was a virus, so i quickly stopped it from downloading any further. Will I be okay?? I have deleted the temp files it left and ran windows defender and restarted my computer and there seems to be no effects (yet.)

Thank you. I dont know what I was thinking, I really wasn't at the time. All I really did was got past a few stages of the wizard and it begun to download but I quickly canceled it before it finsihed.

So, for a while some unknown person from the same location has been signing into my accounts where I have my credit card linked (ex: paypal ,ebay) and I'm not sure what to do for now I have been changing my passwords and removing my credit cards, I also have a feeling that they were the one who managed to get a hold of my credit card information a few months ago and spent nearly thousands of dollars on apple products

What should I (F19) do?

Hello I just a got a lawsuit that says that my ip address had a TikTok acc that was saying bad stuff about a woman but I’m sure that i didn’t. I’m so sure about it because first of all I would never do that and I do not remember it. At that time that the crime was committed I was out with my friends and I have photos and videos from the exact date and also the mail of the acc and the recovery mail are strange to me and also the names are a little bit strange for example imatzqtsuz@gmail… but the ip address is the same as my houses lastly I never give up my wifi pass to anyone and I live alone in my house. What is happening?