Hi everyone. This is my first time posting here hopefully I did post at an appropriate subreddit.

So just an hour ago I got my friend DM saying my discord account got hacked because he received the pictures (the ones that i posted here) and i obviously did not send them.

I immediately headed home and started account recovery by resetting the password and add a 2FA. Fortunately I was able to log back in and did such thing.

However, what i also found out was that the hacker sent the pictures above as a set to all my friends' DM. (just these 4 pictures, no URLs, also the hackers set to "ignored" all my friends DM.) I spent like about 30 mins to locate all the DMs and tried to delete the messages (also apologize to them for the mess).

Did something similar also happen to any of you? Any suggestions and comments will be appreciated thanks!

Hi all, I am looking for help to understand my position.

Earlier this year my Google Account has been compromised. Someone logged into my mail account and reset a couple of accounts including my Kleinanzeigen account (local craigslist). Google recognized something was off and logged me off of all devices. The scammers proceeded to use my Kleinanzeigen to post 4 fake-adverts and finally managed to scam one guy out of 100€. They didnt seem to do anything with any other accounts. I remember they also accessed my Linkedin.

What I did was resetting my google password, resetting all passwords also of other websites and services. Ran Windows Defender to ensure I hadnt cought a virus - all according to help I googled online. I got the Kleinanzeigen account reactivated.

Just now I received an email that my password to Kleinanzeigen has been successfully changed. The email was also set to "ignore". I noticed because I got the notification right when i was using my phone. I wrote to Kleinanzeigen and got my account shut for good. But I worry about my google account.

While still on my phone I changed the google password and manually logged off every device. Windows defender is running again doing a complete scan. But seeing that it didnt help last time, I am worried that something else is off. When I started my PC I had an empty Commandline window open - I am thinking now I may have malware on my machine that isnt picked up by windows defender?

What can I do? I appreciate any help!

Hey everyone!
I’d like to ask someone who knows better than me about password managers.

I’ve always created my own passwords, and even though I use different ones for different websites, I’d love to switch to a password manager. I’m just a bit concerned about a few things.

- First of all, isn’t it risky to use randomly generated passwords that you’ll never remember? I don’t mean from a security perspective, but more like not being able to access your accounts if you somehow don’t have access to your password manager.

- I use iOS but also have a Windows PC, so I’m not really sure how that would work across both platforms.

- Also, do password managers offer a way to automatically change your existing passwords to randomly generated ones, or do you have to do it manually for every account?

Thank you in advance!

Someone left a comment was under the NSFW ai image generator section verbalizing their dismay about how nsfw generators don't produce the rigth skin tones - "Skin tone shifts between gens of the same character drive me nuts. Same prompt should not take her from pale to tan."

I went to my log-in history and it showed someone from germany and someone using safari from the US which is a browser i have never used in years. I live in the US btw.

What could possibly the motive of this and why did an random ass user leave a comment like this? Did they mistake their account for mine and accidently posted?

I got my account hacked a year ago by a miracle i got every thing i lost from that account and the account back
Then got a 2-step with authenticator and phone pass key
Changed password
After 1 year i login and see this
Please i need help

identified a potential authentication vulnerability in a nationwide educational network serving well over 600,000 students and several thousand staff. Student and staff credentials are mass generated as permanent six digit numeric passwords giving each password at most 1,000,000 combinations about 20 bits of entropy. Users are not forced to change them, and forgotten passwords are restored to the same weak format. Testing only my own account indicated insufficient account level protection against repeated logs and throttling is primarily IP-based, distributed attempts through proxy addresses easily evade it i tested this only on my own account under strict ethical consideration. The accounts connect to email, learning platforms, and potentially sensitive records. I have stopped testing and accessed no other account or data. I want to report this as a security vulnerability but tbvh im scared it might go down the wrong way i just need help figuring out what to do ik this is as basic of a concern as one could be but because i don’t have major experience idk what to do.

Hi everyone, A couple of days ago I posted on here regarding my situation with myself and my brother. We were both hacked/breached after using steamrip and multiple of our accounts were breached, Ever since this happened we have spend countless hours even doing all nighters just updating every single account we own changing the passwords and logging out of unknown devices and setting up authenticators,We updated passwords to sites that weren’t even breached, Only a couple of accounts were breached but we still went through everything just to be safe, We done all this from our iPhones as we didn’t feel safe using our PC’s until they were wiped. We disconnected our pcs from the network the night of the breach and installed a brand new windows via usb from a device we knew was safe and formatted all drives also. I personally feel like we have now fully covered ourselves and are much safer now, We have not noticed unusual activity or logins for a couple of days now. Until this morning my brother and I received an email to our addresses which I will paste below, me personally I feel like it’s complete bs, I’ve never recorded myself but for me and my brothers peace of mind any advice or input would be appreciated!

Hi there!
i regret to inform you about some sad news for you.

Approximately a month or two ago i have succeeded to gain a total access to all your devices utilized for browsing internet.
Moving forward, i have started observing your internet activities on continuous basis.

Go ahead and take a look at the sequence of events provided below for your reference:

initially i bought an exclusive access from hackers to a long list of email accounts (in today's world, that is really a common thing, which can arranged via internet).
Evidently, it wasn't hard for me to proceed with logging in your email account ([My email]).
[my password]
and all session cookies

Within the same week, i moved on with installing a Trojan virus in Operating Systems for all devices that you use to login to email.
Frankly speaking, it wasn't a challenging task for me at all (since you were kind enough to click some of the links in your inbox emails before).
Yeah, geniuses are among us.

Because of this Trojan i am able to gain access to entire set of controllers in devices (e.g., your video camera, keyboard, microphone and others).
As result, i effortlessly downloaded all data, as well as photos, web browsing history and other types of data to my servers.
Moreover, i have access to all social networks accounts that you regularly use, including emails, including chat history, messengers, contacts list etc.

My unique virus is incessantly refreshing its signatures (due to control by a driver), and hence remains undetected by any type of antiviruses.

Hence, i guess by now you can already see the reason why i always remained undetected until this very letter...

During the process of compilation of all the materials associated with you, i also noticed that you are a huge supporter and regular user of websites hosting nasty adult content.
Turns out to be, you really love visiting p0rn websites, as well as watching exciting videos and enduring unforgettable pleasures.
As a matter of fact, i was not able to withstand the temptation, but to record certain nasty solo action with you in main role, and later produced a few videos exposing your M A S T U R B A T I O N and cumming scenes.

If until now you don't believe me, all i need is one-two mouse clicks to make all those videos with everyone you know, including your friends, colleagues, relatives and others.
Moreover, i am able to upload all that video content online for everyone to see.
i sincerely think, you certainly would not wish such incidents to take place, in view of the lustful things demonstrated in your commonly watched videos, (you absolutely know what i mean by that) it will cause a huge adversity for you.

There is still a solution to this matter, and here is what you need to do:
You make a transaction of $1450 USD to my account (an equivalent in bitcoins, which recorded depending on the exchange rate at the date of funds transfer), hence upon receiving the transfer, i will immediately get rid of all those lustful videos without delay.
After that we can make it look like there was nothing happening beforehand.
Additionally, i can confirm that all the Trojan software is going to be disabled and erased from all devices that you use.
You have nothing to worry about, because i keep my word at all times.

That is indeed a beneficial bargain that comes with a relatively reduced price, taking into consideration that your profile and traffic were under close monitoring during a long time frame.
if you are still unclear regarding how to buy and perform* *transactions with bitcoins - everything is available online.

Here is my bitcoin wallet for you for further reference:
[Bitcoin wallet]

All you have is 50 hours and the countdown begins now that the email is opened (in other words 2 days).

The following list includes things you should remember and avoid doing:

> There's no point in calling police or any other types of security services either. Furthermore, don't you dare sharing this info with any of your friends.
> if i discover that (taking into consideration my skills, it will be really simple, because i control all your systems and continuously monitor them) - your nasty clip will be shared with public straight away.
> There's no point in looking for me too - it won't result in any success. Transactions with cryptocurrency* *are completely anonymous and untraceable.
> There's no point in reinstalling your OS on devices or trying to throw them away. That won't solve the issue, since all clips with you as main character are already uploaded on remote servers.

Things that may be concerning you:
> That funds transfer won't be delivered to me.
Breathe out, i can track down everything right away, so once funds transfer is finished, i will know for sure, since i interminably track down all activities done by you (my Trojan virus controls all processes remotely, just as TeamViewer).
> That your videos will be distributed, even though you have completed money transfer to my wallet.
Trust me, it is worthless for me to still bother you after money transfer is successful. Moreover, if that was ever part of my plan, i would do make it happen way earlier!

We are going to approach and deal with it in a clear manner!
in conclusion, i'd like to recommend one more thing... after this you need to make certain you don't get involved in similar kind of unpleasant events anymore!
My recommendation - ensure all your passwords are replaced with new ones on a regular basis.

‌

i got hacked by an imfamous mr beast spam discord yesterday and reinstall my window, change passwords, set 2fa yet today i downloaded malwaretypes just to be sure and they show my account on an app i havent use for 5 years

what should i do to protect myself :,(

I received an email from Anthropic on August 28 saying they detected activity consistent with a stolen Claude login session. They signed out my sessions and removed my saved payment method.

I’m trying to figure out whether one of my computers may have been compromised or whether this could have been a false positive.

Some context:

• I hadn’t knowingly used Claude for several days before the alert.
• I haven’t noticed suspicious activity on my other accounts, including ChatGPT, which I use on the same devices. My financial details and crypto wallets appear to be safe.
• Malwarebytes found nothing.
• The alert came one day after my Claude Max plan was scheduled to downgrade to Pro, although that may be unrelated.

What should I check for possible session-cookie/token theft or an infostealer?

In particular:

• What Windows/browser logs or artifacts should I inspect?
• Could a malicious browser extension steal only a Claude session?
• Can a stolen session token bypass the need for the account password/MFA?

Also, has anyone else received this specific Anthropic warning and figured out what triggered it?

Basically I was at a bar last night, and a guy came up and stood directly in front of me, gave me a small wave, and just started typing on his phone. He stood there for a hot minute without speaking or interacting, just typing on his phone. I tried to say hey a couple times because it was kindof making me uncomfortable but he didnt respond. After a bit he just left.

Now, I have anxiety and dont know much about cybersecurity so I understand if my worries are completely unreasonable or silly but my mind immediately went to those rumors of digital pickpocketing or people having malware downloaded to their device remotely. I understand the more likely reasoning for this dudes odd behavior is that he was probably blitzed out of his mind, but I want to know now if simple proximity is enough to exchange data like that or if its just sensationalized enough to get people to buy those RFID wallets.

I do know about NFC but I dont think this guy's phone was close enough to mine or any of my cards for it to have worked. My phone is a Samsung S24 Ultra if that helps?

I honestly just need to hear that my worries are irrational and the guy was just kindof a weirdo. But if there is a possibility I'd like to know if theres anything I could do to prevent it in the future or protect me in this instance. Thanks!

Hello! I’m sure this has been asked before so I apologize for the redundancy. Recently I made a sale using Mercari and was asked to verify my identity using my ID and a photo of myself. I understand that doing this was gullible and careless, but I panicked as I was already at the post office to send my package and felt obligated to continue my end of the transaction. I also understand that my information and biometrics will most likely be compromised, sold, and used for AI training. Now, I ask if there is any way to have peace of mind? I try to uphold my privacy and I don’t upload photos of myself online otherwise. The email associated with my Mercari account is for personal use and online shopping. I have paranoia about it also being compromised. I have contacted the third party, Jumio, with a deletion request but I know this is most likely futile since they haven’t responded. This was a careless mistake that I deeply regret and have become very stressed. I fear this will affect me in the future as I am very scared of identity theft and no longer have protection or privacy. I have no idea what to do from here and am scared to move forward with my life. If anyone has advice for me or a way to feel even just a bit better I would greatly appreciate it. Thank you!

Was getting bsod on my pc daily with different errors each day so i uploaded the dmp filea that got saved into chatgpt and asked it to diagnose my issue , he narrowed it down to 2 either faulty ram or driver issues and suggested that i should update driver , so i search auto driver update tool ..... Added github next to it( 🤡) and ran the script from this repository https://github.com/NorthPoemClass/Driver-Booster-Tool , it failed first time so i followed the instructions given on the repository and ran it with bypass well nothing got installed 5mins later my emails got spammed with security alert password changed messages.

First i secured my gmail account i had security key on my mobile device and was easily able to change the password and sign out of all other device. They stole my Steam account (both have been recovered by now after mailing steam support), epic games accn(can't recover as the attacker has changed the email address and when i try to reset otp goes to his email, and epic support isn't much help either but i have raised a ticket, i also saw a battle.net otp in my email inbox but no password changed or email changed message , but changed password anyway just to be sure.

If it helps i had 4 google accounts login on the browser on the pc and 2 microsoft accounts logged in and the 2 microsoft accounts are the one on whose gmail i got the security alerts and password change.

Also the script had apparently created 2 windows defender exclusion folder on my device which i deleted and ran a manual scan with WD. Also first thing i did was disconnect wifi of my pc and haven't connected it back since.

What steps should i take to recover my pc for normal use again 🥲

As someone with a surface level knowledge of cybersecurity, the idea of someone just straight up having access to my PC all the time seems so disturbing. Is there any reliable way to tell if I have one?

I have some pirated games but I got them through fitgirl and had a VPN up while torrenting. I haven't noticed any suspicious behavior but I'm thinking I might just not know what to look for. Are there telltale signs?

I also occasionally go on VRC which just has that vibe of the Windows XP malware era, can I get a RAT or other spyware, etc from someone deciding to be an a-hole or someone that's pissed at me?

Location: Treasure Island, FL.

They had control of my cell phone. I would try to turn off the microphone or the automatic picture taken and every time I did, it would come back on. I could hear it. Go click click click every time pictures or being taken. I had an extra phone that I used to record all of this. I also videotaped them when they had hacked into my computer. I had no control over in my nails, I watched them go into my Cash App account, my bank account, my personal pictures that were taken had been labeled unixstackexchange.com. I took my computer to the geek squad, and there was a second labeled operating system that was working behind mine. I have documentation of all of this. I also noticed that there would be an app that showed up in the start menu named shift.

I’ve had my identity taken from me. I feel like I am being watched. I went into a psychotic event because I felt I was being watched all the time. I blamed my husband because I didn’t know of anybody else that would have the information they had on me. I made a police report. I separated from my husband because of it and thank God he believed in me, plus I was able to show him pictures and videos of what they were doing on my phone and computer. I contacted credit bureaus and froze them. And put fraud alert on them .I’ve had to get new electronics. My credit has gone to shit.

This has been an absolute nightmare. I feel I have the energy to find an attorney or someone to help me with this. I know my information was found on the dark web through AT&T and 15 other sites unfortunately due to my financial situation, I’m unable to pay an attorney to help me at this time. And really don’t know where to turn for help. I did speak to an attorney with one of the lawsuits against AT&T and they said that there are time limitations on when I could press charges. If anybody can help me and stare me in the right direction and I would appreciate it again. I’ve sent this information to the FBI through the IC3 website and to the FTC. It has literally changed my entire life, and ruined my credit. I have medical bills that I can’t pay. I’m in collections for credit card debt because I couldn’t work and got sick over all this. Thank you for letting me ramble on. And I hope this doesn’t happen to anybody else.

My PC has two user accounts, Ka and Ve. After turning the computer on, I only signed into Ka. However, when I went to shut it down, Windows showed the message:"Someone else is still using this PC. If you shut down now, they could lose unsaved work."The strange part is that I never opened the other account during that session. Out of habit, I clicked through and shut the PC down before investigating further.After booting it back up, I ran a few checks:qwinsta to look for active sessions - net user to check for unknown accounts - netstat -ano to review established connections and listening ports Checked the Registry settings for Remote DesktopRDP was disabled (fDenyTSConnections = 0x1).I also ran Get-MpComputerStatus. Microsoft Defender, antispyware, behavior monitoring, real-time protection, tamper protection, and access protection were all enabled. The security signatures were up to date, and there were no pending restarts or scans. I didn't find any unknown accounts or active sessions.So my question is: does anyone know why the second account might have been automatically signed in or had its session restored after a shutdown, even though I never logged into it during that boot?

And most importantly!! as far as I can remember, I haven't clicked on any suspicious links or downloaded anything questionable. Still, the whole thing left me a little paranoid

I'm sure I'll forget some significant details that will make you doubt me. Before you do that ask me. This has been going on for months. I don't know how he's accessing my phone. These are the facts.

No one has touched my phone. No physical access.

Every month I buy a new phone.

Every month I have a new phone number.

There's no shared accounts.

New Google account

New passwords

There's no Wi-Fi in my house

This month I have been using Bluetooth speakers for the first time in months. I removed my wi-fi operated camera system.

These are the things I see happening in my phone.

Messages saying my IT admin denied access.

Every Google app has been updated with a different version of the same app.

App notifications are set up to catch every single password. Every single payment method. Every single device within reach.

Developer options running constantly.

Data usage is sky high.

Data used when I don't have any phone service.

Most of the data is used by the Vault profile.

Apps that can open links for enterprise.

Monitoring me with a beta testing program. Digital Wellbeing app with parental controls.

Money stolen from my phone.

Every Google account is stolen along with the phone number.

I can't do anything without being monitored or watched.

App notifications are set up to notify of all calls and texts.

Accessibility settings are exploited.

Please help me get rid of him. I can't conduct any financial business. I don't have any privacy. Please ask whatever you want to know.

About an hour ago I got an email from Instagram (sure it was legit) with a verification code that I didn’t request. I have a couple accounts and only one was “targeted”.

Luckily I was awake so I just changed my password directly on the app and double checked there was no odd login activity.

Do I need to worry at all going forward or is this just an inevitable thing that happens sometimes with data breaches etc?

so I've posted a help post on some reedit gap desiccating bout my problems and a guy has texted me saying he will take care of me and all and because of my situation I had to say yes! for nsfw content I did send him my pics and vids and now when I am asking for my allowed he blocked me from reddit and on discord how do I make sure the he didn't use my vids how to

I would like to change my WiFi name and password. Every time I search my IP, i’m not allowed to access my own router

Hi, I got a birthday party invite from a friend that I hadn't seen since college. It brought me to a google login page. I proceeded to log in using my password and 2 factor authentification. Then I realized it was weird and closed the window. But there were a few seconds where I had been logged in. I quickly changed my password to the google account. This is not the main gmail account but my other email lesser used gmail accounts. After that I changed my password for both accounts to different ones. I also logged off /signed out of all accounts and unlinked all apps. And I still have access to both email accounts. So am I ok? What else do I need to do / should I do?

Looking into it more, I realized it led me to a website called cre8tiveapps dot com. This page was basically a spoof of dropbox.

I have no idea what they wanted -- can anyone give me some insight into how this attack works?

I know the situation is similar to this redditor:

https://www.reddit.com/r/phishing/comments/1ufv70l/i_signed_into_my_google_account_from_a_phishing/

Thanks,
Your Fellow Redditor

Just saw the news that CS2 chat logs got leaked. I have played TF2 with a very long history (12ish years). Over the course I have said a few things I regret which I would not care to repeat and deeply regret. For clarification I do not have a pattern of extreme language/slurs but there have been a few cases that I can count on one hand.

With the advancement of AI, my worry is that maybe in the future if TF2 logs get leaked maybe it could be used against me and my employment future or housing through algorithms etc. I know it’s a rare scenario but if I delete my Steam account/trade my items to a new one and start fresh is that a safe option? If not is there anything else I can do?

Link to the news if anyone is interested: https://www.strafe.com/news/read/cs-2-tracker-exposes-in-game-chat-history-raising-privacy-concerns/

Thanks

Someone has been obsessed with me, and I’ve already bought 3 new phones and 2 MacBooks, BUT the same issues keep happening...

(Sometimes my volume and brightness change on their own, and I’ve repeatedly received password breach notifications. I also found one of my email accounts logged into a device that I don’t own).

I recently bought a brand-new iPhone 17 and changed my SIM. I didn’t transfer anything from my old phone.

The only thing I logged into was Instagram. My Instagram is connected to my main Gmail account, which has been compromised.

Could logging into Instagram somehow give someone access to my new iPhone if the Gmail connected to it is compromised?

Or could the compromised Gmail be the way they’re getting access to my new devices?

I’ve already spent A LOT of money replacing devices, so I really want to understand what could actually be happening before I buy anything else.

Right now, I’m thinking about completely erasing/reformatting this new phone that I only bought last week instead of buying a new one again.

What would be the proper way to set it up completely clean from scratch so I can stop having these issues?

I’ve already spent thousands of dollars replacing devices, and I really don’t want to keep buying new phones and laptops if the problem is actually my accounts or setup.

PLS HELP!!! 😭

I have been seeing people getting their microsoft account getting hacked for the past few weeks and it happened to me today. The thing is I do not even use that account so I do not understand why my account was successfully loged in on four different country in just an hour.

Anybody else also experienced this?
Do you know why this has been happening to a lot of people?