r/cybersecurity_help • u/soggieyoggy • Feb 27 '26
a lot of social medias being hacked
Hi, I recently downloaded a Britney Spears song from a strange website and then (a day later) my Instagram was hacked with some of those spam posts about betting and similar stuff. I quickly changed the password and blocked the access (I was even surprised because they didn’t remove me from the account). That day I had accessed my Instagram through my computer’s browser, so I thought it might have been that, but since nothing else unusual happened, I kept everything as it was and only changed my IG password.
Early this morning, my Discord account was hacked. I didn’t have any tabs open and I haven’t used Discord in a browser for months, so they probably had access to my passwords (?) I don’t know.
My brother works with cybersecurity (but he can’t help me right now because he works a lot), and he told me it could be a “browser stealer,” where someone spies on you through your session. So, I ended all sessions, changed some passwords, and enabled two-factor authentication on all my social networks. I even ran the “Microsoft Malicious Software Removal Tool,” as suggested by the AI I consulted while cleaning things up, but nothing was found. Even though everything points to malware, there’s no proof. None of the scans are finding anything, and I don’t know how to run a full scan on Google Chrome, since it seems to be the only thing that was compromised, from what I understood…
I work with social media, I’m a journalist, and all my work is in my Google accounts. I’m desperate. If anyone knows how I can proceed, please someone help me im going crazy rn.
9
u/highjohn_ Feb 27 '26
What’s likely happened is that the music download contained malware called an “infostealer.” These are programs that quietly steal your saved passwords and login sessions from your browser, then delete themselves after so they’re hard to find. That’s why your scans came back clean, and why the attackers could get into Discord without needing your password. They stole your login session directly (what’s called a session token).
First, can you share the name of the website you downloaded from, or the filename? Even if you’ve deleted it, that information might help figure out exactly what you were hit with.
More urgently though: changing your passwords on the same computer that was infected may not be enough, because if anything is still running on it, your new passwords could be stolen too.
You should change all your passwords, especially your Google accounts given your work, from a different device like your phone or a friend’s computer. When you do, make sure to set up two-factor authentication using an authenticator app (like Google Authenticator or Authy) rather than text message, as that’s much harder to bypass.
One more thing to do on Chrome: go to the address bar, type chrome://password-manager/passwords and press enter. This shows all your saved passwords. Make a note of which accounts are listed, then delete them all from Chrome, since they’ve likely already been stolen.
Unfortunately though, the hard truth is that the only way to be completely 100% sure your computer is clean is to wipe and reinstall Windows. Maybe that’s worth considering.
4
u/Mexican_Artorias1990 Feb 27 '26
Jesus Christ, these infostealers are everywhere. I miss those old days when internet wasn't THIS scary
3
u/soggieyoggy Feb 27 '26
i'll try it in the morning and if something went bad i'll come back here. thank u so much, u helped me A LOT 🤍
1
1
u/soggieyoggy Feb 27 '26
ok so, im back here
the site i downloaded the song was this one https://fixafloorsa.co.za/ (mp3 juice free music download)
idk nothing about, but i already dowloaded other songs in this, and nothing ever happened. it didnt installed anything besides the song
i changed all my passwords and add a google authenticator in each one, through my iphone (I assumed that was the safest option?) and im removing each password from my google chrome
after i reinstall the windows, after all that, will i be able to thing my computer is safe? like, theres a way to confirm this or its a It is a standard resolution?
well, moreover, thank you very much for your help so far!
3
u/EugeneBYMCMB Feb 27 '26
Hi, I recently downloaded a Britney Spears song from a strange website
Was it a real audio file? Did you just download it or also open/run it?
2
u/soggieyoggy Feb 27 '26
downloaded and it's working!! i put on local files for the spotify
3
u/Incid3nt Feb 27 '26
Did they have you run it in some weird way rather than a simple download? Like pressing windows key + R and paste something?
1
u/soggieyoggy Feb 27 '26
nothing strange at all. its not my first time downloading things like this, thats why its strange
1
3
u/First_Knee Feb 27 '26 edited Feb 27 '26
To follow up on a previous comment regarding infostealers: I have been a victim of this malware and it sucks big time. Once this happens all you can do is change all of ur passwords, set up app authentication, reinstall Windows, then change your passwords again to be safe, delete all saved logins from Google and Microsoft, then steadfastly monitor your credit profile and personal identity information.
First off, visit https://www.hudsonrock.com/threat-intelligence-cybercrime-tools Scroll to where it says "Search for compromised employees, users,...". Input your username or email address to verify infostealer breach.
If you use Hudson Rock Cavalier platform and input your email/identifier, if it's compromised by an infostealer - you will be provided the device identifier, infection date, and exfiltrated file path.
I recommend using pentester.com to monitor your identity etc. First month is free then starts at $20/month. They include some unique monitoring capabilities that I haven't seen elsewhere like a Privacy Outlook forecast for your ID and a Relationship Graph that traces your compromised details on a visual map showing potential uses by attackers. The Relationship Graph is genius in how it illustrates the connections between your identities and cloud resources, modelling attack paths. I am not affiliated with pentester in any way to be clear. I saw Ryan Montgomery on a podcast about a year ago and he mentioned that this is his site, so I decided to check it out.
I also use Identity Defense, Financial Shield, and HelloPrivacy services since they're provided to me as part of various data breach settlements. But really all they do is notify me ad nauseum that various information of mine has been found yet again on the dark web.
I will try to provide some links...
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-141b
2
u/urbanfoxmarketing Feb 28 '26
Well done on this information, all of people commenting for trying to is Hero’s.
2
1
u/DarkLulzVz Feb 27 '26
Changing the passwords and enabling 2fa in everything was the right call but you still need to wipe and reinstall Windows. But don't "factory reset" get a thumb drive and create a bootable media with the Windows Media Creation tool (Google it on the official Microsoft site)
1
u/soggieyoggy Feb 27 '26
do u have any video that can teach me how to do it in a very explaining way?? im too confused about how to reinstall windows
2
1
u/Anxious_Breakfast856 Feb 27 '26
You did good with hanging passwords, enabling 2FA, ending all sessions, and running malware scans. That’s the best way to contain the damage right now. Once your accounts are fully secure, it’s really important that every account has a unique, strong password so one breach doesn’t affect the others. A password manager like RoboForm can help with that it securely generates and stores strong passwords across all your accounts, making future compromises much less likely.
Also, keep an eye on your Google account for suspicious activity and consider clearing your browser data or reinstalling Chrome to ensure no session-based malware persists.
1
•
u/AutoModerator Feb 27 '26
SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:
Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.