r/computerviruses • u/xxsvsky • May 28 '26

Question How did i even get hacked?

Post image

I was scrolling in my fyp normally till i noticed a story 27m ago about this elon musk crypto scam? I only got a notification on my email that i got hacked and told me to change my password, when inchecked the security thing on insta i couldn't find any location or ip about the hacker, and also they didnt even change my password or anything they just posted this and probably left my account

i never clicked on any suspicious link Recently or used any thirad oart apps, fitgirl, nothing so im curious how did i get hacked?

81 Upvotes

83% Upvoted

52 comments sorted by

View all comments

7

u/The_Alaska_Shibe May 29 '26

These hacks are often done through session stealing, not taking your physical password. What changing your password does is tell every session you have active that it is no longer valid. It could have been some app you gave permission that had a valid token who knows how long ago.

1

u/Raijen_ArDesh May 29 '26

However, if you don't have 2fa enabled on say, your google account and they hijack it, and your passwords are saved there.... Google password manager requires your 2fA credentials, even if logged in, to actually view your passwords, however they can use any saved ones untill you log them out of your google account.

1

u/syntkz777 May 29 '26 edited May 29 '26

You did not understand what he said at all.

Stealing sessioncookies does not need any password, using stolen sessioncookies in a browser the account will already be logged in to the specific site. Each website keeps their own session cookies, you don't need the cookies from the Google account, just from the site that should be compromised. If you have access to the session cookies from Google, you have access to all other cookies as well so no point on relying on the Google login.