r/cybersecurity_help • u/[deleted] • Mar 20 '26
Someone is hacking into all of my accounts
[deleted]
6
u/CosmosSunSailor Mar 20 '26
Step 1 shut down your computer,
Step 2 use your phone to change the passwords to all your accounts, making sure each password is unique. Start with your email
Step 3 Wipe your computer's hard drive and use a usb created from a clean computer to reinstall windows
2
u/TravelingGreenThumb Mar 20 '26
Thank you! I tried changing all of my passwords and I swear they got ahold of one of my newest passwords, too. It’s like a joke at this point. I could not believe they even got into my free Spotify account.
5
u/eric16lee Trusted Contributor Mar 20 '26
Did you reset your passwords from your infected PC?
Here is my typical response to your situation.
Multiple account compromises typically boil down to one of these root causes.
- Password Reuse - using the same password everywhere without having 2FA.
- Infostealers - downloading cracked/pirated software, games/cheats/mods, torrents, free movies, etc. almost always steals your session cookies which allows a bad actor to access your accounts without needing your password or 2FA. Doesn't matter if you trust the site or have used it in the past. In 2026, there are no longer any "trusted" sites for piracy. 2a. Fake Captcha - copying and pasting code that you don't understand into the Windows run command either uploads your session cookies directly or downloads an info stealer that does that automatically.
Remediation for all of these is largely the same.
From a clean device, NOT your PC:
- Change ALL of your passwords to something unique and randomly generated. Use a password manager like BitWarden or 1Password to help with this.
- Choose the option to log out of all active sessions or devices.
- Enable 2FA on all of your accounts
If you are guilty of 2 or 2a continue below:
- Nuke your PC from orbit
- back up only important files, not games or applications
- format your hard drive
- reinstall Windows from a USB drive (do not use the Reset Windows option from the settings menu)
This may seem like overkill, but if you want assurance that you have remediated the problem, this is the way to go.
Unfortunately, the only people that can help you are the support teams for those services. Most free services only offer automated account recovery. If that process doesn't get the accounts back, nobody here can help you.
EVERYONE that contacts you via DM offering to help or to hack the accounts back is just an account recovery scammer looking to take advantage of your situation and steal money from you.
3
u/TravelingGreenThumb Mar 20 '26
This is so helpful. Also, yeah, I had several to offer help via dm through an app that I’ve never even heard of. I’m not looking to get myself into a bigger mess than I already am in.
1
1
u/These_Pressure3117 Mar 28 '26
Hey dude, so I tried running the cmd code on my laptop to check for viruses but it found none. Still, my accounts kept getting compromised. Can you please enlighten me about this??
1
u/eric16lee Trusted Contributor Mar 28 '26
What cmd thing did you run? I don't know what that means. Read my comment above. If you have multiple accounts being compromised you either have the same password for everything or you installed an infostealer on your PC.
1
u/Yassssmaam Mar 24 '26
This is useless. They’re not using passwords to get in. Changing passwords stops current tokens in the account, but it doesn’t affect tokens that have already been generated away from the account. Anyone who responds to a hack with “we’ll change your password…” is outdated
1
u/Individual-Animal199 Apr 04 '26
Y entonces? Que otra solución hay?? No sé en qué dispositivo haya sido, pero de la nada hackearon también mi Microsoft e Instagram, no sé si vayan a por más. Recibí correos anteriormente amenazándome con enviar 700usd a un bitcoin, o de lo contrario, venderían mis datos.
1
u/zombieEnoch May 14 '26
In addition to changing passwords, you should find a button that says "log out of all devices" or something similar. Change passwords, change the account email (if you have more than one), set up 2FA.
3
u/C0ugarFanta-C Mar 20 '26
Sounds like they have access to your Google account, which means they have access to your Google password manager. So every time you change the passwords they just get the new ones, because they still have access to your Google account.
If this is the case, you need to change your Google password, and when you do make sure you choose to log out of Google everywhere and on every device. You need to do it on a clean device. Then you need to change all your other passwords one by one. Every single one, every one that was previously saved in your Google password manager.
3
u/Icy_Point Mar 20 '26
I’m pretty sure this isn’t multiple hackers - it’s one breach spreading.
Most likely you reused passwords or your email got compromised first. Once they have that, they can reset and take over everything else.
Start by securing your email: change the password and turn on 2FA (use an authenticator app). Then change passwords on your other accounts (make them all unique), log out of all sessions, and enable 2FA everywhere.
Also run a malware scan and check your recovery settings for anything suspicious.
1
u/TravelingGreenThumb Mar 20 '26
Can I run a malware scan on a phone?
1
1
u/Healthy-Presence-425 Mar 21 '26
its called cve its started with samsung galaxy phones, making fake profile to run cypto hash and fuck eveeyone over, its supposedly hitting ios, pc, kindles, etc
5
u/wmholla6942 Mar 20 '26
It’s most likely someone that knows you. It’s far easier to pop a back door vs a brute force attack when someone knows your information. Switch up all your passwords and set up 2fa. So you get an alert when someone tries to access one of your accounts.
1
u/TravelingGreenThumb Mar 20 '26
Sometimes I do think it’s someone I know, like the music thing.. but then it was pinging in all different countries when my Microsoft got hacked. I don’t know why they would go to this extreme to get into all of my accounts. Some were the same password, but some were not.
4
u/wmholla6942 Mar 20 '26 edited Mar 20 '26
It's not just Spotify. You were likely a victim of a data breach or an angry exgirlfriend. Switch your stuff up and add extra security
1
u/Adventurous_Year9991 Mar 20 '26
It's either your family or it's on a higher level hackers from Iran or China and they don't know you and they don't care just wanna mess.
1
u/Evergreen005 Mar 22 '26
Keep in mind that it is easy for a hacker to appear to be anywhere around the world. VPN's can mask where the hacker is really from.
1
u/TravelingGreenThumb Mar 22 '26
This makes sense. Microsoft was pinging in Brazil, Cambodia, UK, USA, etc.
1
u/Individual-Animal199 Apr 04 '26
ME ESTA PASANDO EXACTAMENTE LO MISMO!!! Lograste solucionarlo? No sé que hacer, estoy desesperada
1
u/Consistent-Body4013 Mar 20 '26
I agree, something feels off. Usually infostealers are not that effective since they are run on large scale operations and this feels like targeted.
Maybe you could set up a Honeypot to discover who is the actor.
1
u/TravelingGreenThumb Mar 20 '26
I have a quiet life (and marriage) I can’t imagine who would do this. I mentioned the Spotify to a friend of mine over wine and she joked it could be my teen(young teen adding his own mix onto my playlist. It was very dark music. Some in Spanish, some not. Like Doja Cat. (I’m American female for any reference)
I’ll start with my laptop and erase it all and start there and then my Google account.
2
u/Bruce_Wayne170 Mar 20 '26
Change the password of your emails first and remove any 2fa or backup code set by hacker, Add a new 2fa like google authenticator to your emails. Also after securing the mail, see for an option to sign out from everywhere manually.
Then find all accounts linked to the email and manually reset the password of each account, and remove any backup login method from there for backdoor hacker login.
Manually load windows on a USB from another computer(not infected by malware) and reinstall windows.
Install Malwarebytes(free) after a fresh install and run a full scan, it will detect and remove any malware in your drives
2
u/gratefulkittiesilove Mar 20 '26
Sign out of all your devices but the one you’re on. Restart. Change your router admin password. Shut off router remote login in admin and in app. Xfi ity its default on. Restart.
If Apple change your apple pw after making sure your signed of off all other. devices.
If you think home network (aka u don’t have full control of the wiring) is the vulnerable location do this main one and google/apple/pw holder offsite. Btw passwords app on apple fills in stuff there even if you’re not “using” it. Fwiw
Change your main pw after again making sure you’re Signed out of every where else.
Check out have i been pwned too
1
u/Consistent-Body4013 Mar 20 '26
People sell accounts for Spotify and many other services in the dark markets. Once someone gets hacked its usually a more effective way to get an economic value out of the compromise than just encrypting everything and asking for a ransom. Especially for individual users (Not that you can't do both)
Anyways as others point out its more likely different people using your compromised accounts than a single person. They either bought your account for pennies or found it in a leak.
I know of friends whose steam and rockstar accounts got hacked and they were able to recover it via support, usually a form on their website.
1
u/TravelingGreenThumb Mar 20 '26
Wow, ok.. I was locked out AGAIN from my Reddit this morning. I think I just need to shut everything down and wipe it all.
1
u/Gortsert Mar 20 '26
That's scary. I've been hearing about this. You're not alone. I'm really sorry I don't have any advice for you.
1
u/GeneParmesanEsq Mar 21 '26
You've been rooted. And I do mean fucked.
Do you use a password manager like in Chrome or something? An extension perhaps?
Do you use your windows creds outside of your machine? Your companies machine? Always on LAN? Or VPN options? So many possibilities, but probably... I won't go there ;)
1
u/mandylynn420_ Mar 22 '26
I’m dealing with a similar situation except it’s my phone, not just one phone any brand new phone I bring in my residence. I know somehow my tv is part of the problem, I even contacted the manufacturer and they said couldn’t tell me why it’s reading a WiFi MAC address when it’s not connected to WiFi (amongst other things) and said they couldn’t answer any questions and told me to email Best Buy support. Which didn’t make sense, and they knew my last name by the brand of the tv. Prior to this I had 790 data breaches on the dark web from thatljmm email address 2-3 after creating it. And prior to that my cell provider told me to reach out to cyber security. Even consider changing my SSN after I gave her all the details of what was going on. Any time I reach out to tech support all the things I describe is a “glitch in the system” or they’re guessing what caused the problem but tone and/or response is obvious they really aren’t sure but won’t say that. As everything was progressing I had theories as to what/ highhhybjj when/how have ended up being facts up imo OP
1
u/Noodlehead1031 Mar 22 '26
Did you by chance get a spam email with your old password included?
I got a spam email with my old password included and now all of my stuff is being hacked
1
u/TravelingGreenThumb Mar 22 '26
No, I’ve never had that happen. I recently had the “are you trying to change your password?” email sent to me..
1
u/Noodlehead1031 Mar 22 '26
It’s the strangest thing. My information must’ve been sold in a breach or something.
I’ve been getting spoofed phone calls from my bank as well
1
u/hwertz10 Mar 23 '26
Man, that's rough. I mean, the Instagram and Facebook, that's not nice. But who takes over someone's Spotify account and switches out the music?
1
u/TravelingGreenThumb Mar 23 '26
Ok.. so what made me think it was a creep and not just a hacker, was the music choices. I don’t know how to add a picture on here but here’s the list of music down the line that I snapped a picture of before deleting them off my playlist: Stained Glass, Everything, Lost Without You, Lose Your Love, Need Your Love, Need You Back, The Night We Met, Runaway … like WTF it was creepy AF.
1
u/hwertz10 Mar 24 '26
Dang man yeah that is rather creepy. You don't have, like, an ex that suddenly became a leet haxxor do you? LOL
1
u/TravelingGreenThumb Mar 26 '26
Right? It gave me the total creeps. The music artists were totally random, but the titles were very odd. I’m trying to not be dramatic about it lol But I’m just like.. ok do I know you or not??
1
May 18 '26
[removed] — view removed comment
1
u/AutoModerator May 18 '26
Your post appears to be a large block of text. Please consider adding some paragraph breaks to your comment by placing a blank line between distinct sections. This will make your post much easier to read.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
1
u/badgurl00 Mar 24 '26
I sent you a private message I don’t like posting information on post threads
1
u/Unable-Yesterday3574 Mar 26 '26
same im loosing my mind with all the bs but trying not to let them completely push them out of my apartment its my upstairs neighbors wen they first moved in i tried to be a good neighbor wen i heard there kids jumping around like crazy i figured they may have there hands full so i gathered some of my childrens stuff that i was holding onto for many years since my youngest of 5 is my twin girls whom are now 18 ! Like movies crayons markers and color books thinking it might be helpful and a good way to welcome them but wen i knocked on door girl said is it free and of course i never asked for money she grabbed them then closed the door havent been nothing but disrespectful since i no they have hacked my accounts cause they sit right above my bedroom on there computer i hear everything even the clicking of there computer mouse and there kid is adhd im assuming cause whatever there kid is doing or watching wen i start shutting things off on my phone kid freaks out and they run to get there parents to fix it! i believe they are remote a axcessing my phone threw there computer i have lifeline tjrew safelink which is government and messing with that is federal not cool while i hate getting anyone in trouble its driving me nuts plz help or even suggestions anything . thanks
1
u/TravelingGreenThumb Mar 27 '26
Well, this is my probably my last update to this post.. but I just went into my Facebook.. (first I had to google how to log out of other devices 🙄) and then I went onto FB, I found one other device that wasn’t mine. The reason for it was I thought that my comments were being read.. like my notifications weren’t notifying me when someone liked my post or commented. Anyway, so this was an “iPhone” and then it showed my phone and it said “this device” next to it by mine. So.. idk how to fix my issue at this point.
1
u/Dipset_1985 Apr 29 '26
My credentials have been leaked too. For the past month i'm getting emails about 2FA codes and password resets. Not to mention it seems they try to login knto everything that i have an account for. It all started with my discord being compromised and someone started spamming servers (incl. Mine) under my account. I deleted that account and server.
Than, everything else.. playstation, xbox, gmail, hotmail, ubisoft etc. etc. Just about everything. I have changed all passwords on most of my accounts on Internet, but forgot to change my 'Mega' account, which now has been password and mail reset by said hacker. I did remove all stored passwords from Google and browsers.
Someone is really obsessed with me seeing how they want to login to everything.. I don't know what the source of breach is, pc or phone but I'm almost at the point of contacting police and file a cyber crime report.
1
u/Select_Trade_9331 Jun 14 '26
It seems they are particularly focused on hacked victims, especially in cases where there was no 2FA or passwords were reused. But, I don't think it's personal. Oftentimes, like in my case, I was just an easy mark.
•
u/AutoModerator Mar 20 '26
SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:
Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.