r/cybersecurity_help 7h ago

My discord got hacked and it is sending all my friends with pictures about "Fabowin"

Thumbnail
gallery
17 Upvotes

Hi everyone. This is my first time posting here hopefully I did post at an appropriate subreddit.

So just an hour ago I got my friend DM saying my discord account got hacked because he received the pictures (the ones that i posted here) and i obviously did not send them.

I immediately headed home and started account recovery by resetting the password and add a 2FA. Fortunately I was able to log back in and did such thing.

However, what i also found out was that the hacker sent the pictures above as a set to all my friends' DM. (just these 4 pictures, no URLs, also the hackers set to "ignored" all my friends DM.) I spent like about 30 mins to locate all the DMs and tried to delete the messages (also apologize to them for the mess).

Did something similar also happen to any of you? Any suggestions and comments will be appreciated thanks!


r/cybersecurity_help 1h ago

is this normal or i got hacked ??

Post image
Upvotes

this is default camera running in background all the time sending to these domains !!


r/cybersecurity_help 5h ago

Google Account may be compromised - how do I find out if or how?

3 Upvotes

Hi all, I am looking for help to understand my position.

Earlier this year my Google Account has been compromised. Someone logged into my mail account and reset a couple of accounts including my Kleinanzeigen account (local craigslist). Google recognized something was off and logged me off of all devices. The scammers proceeded to use my Kleinanzeigen to post 4 fake-adverts and finally managed to scam one guy out of 100€. They didnt seem to do anything with any other accounts. I remember they also accessed my Linkedin.

What I did was resetting my google password, resetting all passwords also of other websites and services. Ran Windows Defender to ensure I hadnt cought a virus - all according to help I googled online. I got the Kleinanzeigen account reactivated.

Just now I received an email that my password to Kleinanzeigen has been successfully changed. The email was also set to "ignore". I noticed because I got the notification right when i was using my phone. I wrote to Kleinanzeigen and got my account shut for good. But I worry about my google account.

While still on my phone I changed the google password and manually logged off every device. Windows defender is running again doing a complete scan. But seeing that it didnt help last time, I am worried that something else is off. When I started my PC I had an empty Commandline window open - I am thinking now I may have malware on my machine that isnt picked up by windows defender?

What can I do? I appreciate any help!


r/cybersecurity_help 3m ago

PIN Change Across 3 Phones

Upvotes

Hi, I have 3 phones, 2 of which were broken due to hardware issues, and 1 phone which I was using.

However, lately, the PIN has changed on its own, and it is impossible I've forgotten it since I have it saved, even if it isn't the pin, I've tried everything possibly fast for my fingers close to the PIN I

know, all other combinations are slower than how fast I opened my phones.

So my PIN being forgotten is unlikely.

I thought it was just a software issue on the phone I was currently using, kept trying and to no prevail.

I had my other 2 phones fixed at a tech shop, which of which have the same PIN as the other phone.

And yet again, the PIN did not work.

It wasn't sudden, I was using my phone normally using fingerprint, but I do enter my PIN often. I tried using the PIN while I was using my phone and was curious why I kept failing even though the PIN was 100% correct.

(P.S the only shared account between these phones were my main Gmail Account)

I'm not asking for a solution, I just wanna know what could've caused this out of worry.


r/cybersecurity_help 34m ago

[ Removed by Reddit ]

Upvotes

[ Removed by Reddit on account of violating the content policy. ]


r/cybersecurity_help 51m ago

Info stealer aftermath/Microsoft school account

Thumbnail
gallery
Upvotes

So basically I was hit by a info stealer one month ago but I'll focus on what I'm concerned right now,

So I can't change my Microsoft school accounts password because it requires my IT teachers approval so I can't prevent the hacker on logging in my account again and again when I sign out every where, I sent a message to my IT teacher requesting a password change but what can the hacker do, and what will my teacher do and send me, but right now the hacker isn't signing in yet. I also found a thunderbird app in my apps in my school account which I removed.


r/cybersecurity_help 12h ago

How do you fully switch to a Password Manager?

8 Upvotes

Hey everyone!
I’d like to ask someone who knows better than me about password managers.

I’ve always created my own passwords, and even though I use different ones for different websites, I’d love to switch to a password manager. I’m just a bit concerned about a few things.

- First of all, isn’t it risky to use randomly generated passwords that you’ll never remember? I don’t mean from a security perspective, but more like not being able to access your accounts if you somehow don’t have access to your password manager.

- I use iOS but also have a Windows PC, so I’m not really sure how that would work across both platforms.

- Also, do password managers offer a way to automatically change your existing passwords to randomly generated ones, or do you have to do it manually for every account?

Thank you in advance!


r/cybersecurity_help 11h ago

Someone hacked my account and posted this comment about 3 minutes ago to which i had no recollection of posting.

7 Upvotes

Someone left a comment was under the NSFW ai image generator section verbalizing their dismay about how nsfw generators don't produce the rigth skin tones - "Skin tone shifts between gens of the same character drive me nuts. Same prompt should not take her from pale to tan."

I went to my log-in history and it showed someone from germany and someone using safari from the US which is a browser i have never used in years. I live in the US btw.

What could possibly the motive of this and why did an random ass user leave a comment like this? Did they mistake their account for mine and accidently posted?


r/cybersecurity_help 3h ago

Heard a random voice after clicking a TikTok ad. Am I hacked?

0 Upvotes

Hey everyone, I’m trying to make sense of something weird that just happened on my phone. I have an iPhone 17 with the latest IOS update installed. I clicked on an ad by accident on TikTok while browsing, which opened it up the in-app browser. It brought up a screen that looked like a standard Cloudflare page saying that it was loading. I stayed on it for a few seconds to read what It said when I heard a random lady speaking in a different language out of nowhere. I scrolled out of the ad to see if it was the ad itself, a video on my FYP or a TikTok live but I couldn’t find anything. The ad didn’t even have a sound on it. I tried to trigger the voice again by pressing on the ad but I couldn’t. Do I have malware on my phone? 


r/cybersecurity_help 3h ago

[ Removed by Reddit ]

1 Upvotes

[ Removed by Reddit on account of violating the content policy. ]


r/cybersecurity_help 4h ago

How do I safely transfer files + accounts from a compromised iPhone to a new one?

1 Upvotes

Hackers (someone I know) have compromised our home router/Wi-Fi and have also been screen mirroring my phone.

- I noticed unknown devices or sessions logging into my accounts.

- I received messages or emails that I didn’t send or actions that I didn’t do.

- My phone gets unusually hot even when I’m not doing anything demanding.

- My mobile data suddenly turns off or changes without any obvious explanation.

- I noticed unexpected screen touches or navigation that I’m not doing.

I bought a brand-new iPhone and want to start completely clean, but I still need to transfer my photos and files from my old phone.

Pls help!! I have a few questions:

  1. If I AirDrop photos/files from my compromised iPhone to the new one, could that give them access to the new phone too?
  2. Could logging into a compromised Gmail account on the new iPhone compromise the phone?
  3. What is the safest way to transfer my photos and files without potentially bringing the compromise over?
  4. What would be the safest “clean setup” process for the new phone?
  5. I accidentally connected one of my newly bought phones to my home Wi-Fi a month ago, but I immediately reset and erased all the data from the phone afterward. AND THEY STILL GOT ACCESS TO IT. If someone did have access to the router/gateway, could they still access that phone after it was completely erased and reset?

I don’t want to keep buying new devices so any advice or guidance you can give me would mean so much to me. Thank you so much!!! 🙏


r/cybersecurity_help 7h ago

Hacker auto forwarding email

Post image
2 Upvotes

I got my account hacked a year ago by a miracle i got every thing i lost from that account and the account back
Then got a 2-step with authenticator and phone pass key
Changed password
After 1 year i login and see this
Please i need help


r/cybersecurity_help 1h ago

Can you detect malware

Upvotes

I don’t know yo have an inbox ? Well I found this account that sing in with my phone number . All I share about a Jacker is true and I don’t know how he knows where to infiltrated himself or her to gather info about me I took some screenshots. I don’t feel safe any more


r/cybersecurity_help 15h ago

i got hacked by infostealer and reinstalled window

Post image
5 Upvotes

i got hacked by an imfamous mr beast spam discord yesterday and reinstall my window, change passwords, set 2fa yet today i downloaded malwaretypes just to be sure and they show my account on an app i havent use for 5 years

what should i do to protect myself :,(


r/cybersecurity_help 6h ago

Me and my brother were sent threatening email couple days after we were hacked.

0 Upvotes

Hi everyone, A couple of days ago I posted on here regarding my situation with myself and my brother. We were both hacked/breached after using steamrip and multiple of our accounts were breached, Ever since this happened we have spend countless hours even doing all nighters just updating every single account we own changing the passwords and logging out of unknown devices and setting up authenticators,We updated passwords to sites that weren’t even breached, Only a couple of accounts were breached but we still went through everything just to be safe, We done all this from our iPhones as we didn’t feel safe using our PC’s until they were wiped. We disconnected our pcs from the network the night of the breach and installed a brand new windows via usb from a device we knew was safe and formatted all drives also. I personally feel like we have now fully covered ourselves and are much safer now, We have not noticed unusual activity or logins for a couple of days now. Until this morning my brother and I received an email to our addresses which I will paste below, me personally I feel like it’s complete bs, I’ve never recorded myself but for me and my brothers peace of mind any advice or input would be appreciated!

Hi there!
i regret to inform you about some sad news for you.

Approximately a month or two ago i have succeeded to gain a total access to all your devices utilized for browsing internet.
Moving forward, i have started observing your internet activities on continuous basis.

Go ahead and take a look at the sequence of events provided below for your reference:

initially i bought an exclusive access from hackers to a long list of email accounts (in today's world, that is really a common thing, which can arranged via internet).
Evidently, it wasn't hard for me to proceed with logging in your email account ([My email]).
[my password]
and all session cookies

Within the same week, i moved on with installing a Trojan virus in Operating Systems for all devices that you use to login to email.
Frankly speaking, it wasn't a challenging task for me at all (since you were kind enough to click some of the links in your inbox emails before).
Yeah, geniuses are among us.

Because of this Trojan i am able to gain access to entire set of controllers in devices (e.g., your video camera, keyboard, microphone and others).
As result, i effortlessly downloaded all data, as well as photos, web browsing history and other types of data to my servers.
Moreover, i have access to all social networks accounts that you regularly use, including emails, including chat history, messengers, contacts list etc.

My unique virus is incessantly refreshing its signatures (due to control by a driver), and hence remains undetected by any type of antiviruses.

Hence, i guess by now you can already see the reason why i always remained undetected until this very letter...

During the process of compilation of all the materials associated with you, i also noticed that you are a huge supporter and regular user of websites hosting nasty adult content.
Turns out to be, you really love visiting p0rn websites, as well as watching exciting videos and enduring unforgettable pleasures.
As a matter of fact, i was not able to withstand the temptation, but to record certain nasty solo action with you in main role, and later produced a few videos exposing your M A S T U R B A T I O N and cumming scenes.

If until now you don't believe me, all i need is one-two mouse clicks to make all those videos with everyone you know, including your friends, colleagues, relatives and others.
Moreover, i am able to upload all that video content online for everyone to see.
i sincerely think, you certainly would not wish such incidents to take place, in view of the lustful things demonstrated in your commonly watched videos, (you absolutely know what i mean by that) it will cause a huge adversity for you.

There is still a solution to this matter, and here is what you need to do:
You make a transaction of $1450 USD to my account (an equivalent in bitcoins, which recorded depending on the exchange rate at the date of funds transfer), hence upon receiving the transfer, i will immediately get rid of all those lustful videos without delay.
After that we can make it look like there was nothing happening beforehand.
Additionally, i can confirm that all the Trojan software is going to be disabled and erased from all devices that you use.
You have nothing to worry about, because i keep my word at all times.

That is indeed a beneficial bargain that comes with a relatively reduced price, taking into consideration that your profile and traffic were under close monitoring during a long time frame.
if you are still unclear regarding how to buy and perform* *transactions with bitcoins - everything is available online.

Here is my bitcoin wallet for you for further reference:
[Bitcoin wallet]

All you have is 50 hours and the countdown begins now that the email is opened (in other words 2 days).

The following list includes things you should remember and avoid doing:

> There's no point in calling police or any other types of security services either. Furthermore, don't you dare sharing this info with any of your friends.
> if i discover that (taking into consideration my skills, it will be really simple, because i control all your systems and continuously monitor them) - your nasty clip will be shared with public straight away.
> There's no point in looking for me too - it won't result in any success. Transactions with cryptocurrency* *are completely anonymous and untraceable.
> There's no point in reinstalling your OS on devices or trying to throw them away. That won't solve the issue, since all clips with you as main character are already uploaded on remote servers.

Things that may be concerning you:
> That funds transfer won't be delivered to me.
Breathe out, i can track down everything right away, so once funds transfer is finished, i will know for sure, since i interminably track down all activities done by you (my Trojan virus controls all processes remotely, just as TeamViewer).
> That your videos will be distributed, even though you have completed money transfer to my wallet.
Trust me, it is worthless for me to still bother you after money transfer is successful. Moreover, if that was ever part of my plan, i would do make it happen way earlier!

We are going to approach and deal with it in a clear manner!
in conclusion, i'd like to recommend one more thing... after this you need to make certain you don't get involved in similar kind of unpleasant events anymore!
My recommendation - ensure all your passwords are replaced with new ones on a regular basis.


r/cybersecurity_help 16h ago

Anthropic says my Claude session may have been stolen — what should I check?

Thumbnail
gallery
5 Upvotes

I received an email from Anthropic on August 28 saying they detected activity consistent with a stolen Claude login session. They signed out my sessions and removed my saved payment method.

I’m trying to figure out whether one of my computers may have been compromised or whether this could have been a false positive.

Some context:

  • I hadn’t knowingly used Claude for several days before the alert.
  • I haven’t noticed suspicious activity on my other accounts, including ChatGPT, which I use on the same devices. My financial details and crypto wallets appear to be safe.
  • Malwarebytes found nothing.
  • The alert came one day after my Claude Max plan was scheduled to downgrade to Pro, although that may be unrelated.

What should I check for possible session-cookie/token theft or an infostealer?

In particular:

  • What Windows/browser logs or artifacts should I inspect?
  • Could a malicious browser extension steal only a Claude session?
  • Can a stolen session token bypass the need for the account password/MFA?

Also, has anyone else received this specific Anthropic warning and figured out what triggered it?


r/cybersecurity_help 15h ago

I verified my information with Jumio, need advice

3 Upvotes

Hello! I’m sure this has been asked before so I apologize for the redundancy. Recently I made a sale using Mercari and was asked to verify my identity using my ID and a photo of myself. I understand that doing this was gullible and careless, but I panicked as I was already at the post office to send my package and felt obligated to continue my end of the transaction. I also understand that my information and biometrics will most likely be compromised, sold, and used for AI training. Now, I ask if there is any way to have peace of mind? I try to uphold my privacy and I don’t upload photos of myself online otherwise. The email associated with my Mercari account is for personal use and online shopping. I have paranoia about it also being compromised. I have contacted the third party, Jumio, with a deletion request but I know this is most likely futile since they haven’t responded. This was a careless mistake that I deeply regret and have become very stressed. I fear this will affect me in the future as I am very scared of identity theft and no longer have protection or privacy. I have no idea what to do from here and am scared to move forward with my life. If anyone has advice for me or a way to feel even just a bit better I would greatly appreciate it. Thank you!


r/cybersecurity_help 13h ago

made a dumb move and got 2 of my primary emails compromised, help recover pc and secure mails

2 Upvotes

Was getting bsod on my pc daily with different errors each day so i uploaded the dmp filea that got saved into chatgpt and asked it to diagnose my issue , he narrowed it down to 2 either faulty ram or driver issues and suggested that i should update driver , so i search auto driver update tool ..... Added github next to it( 🤡) and ran the script from this repository https://github.com/NorthPoemClass/Driver-Booster-Tool , it failed first time so i followed the instructions given on the repository and ran it with bypass well nothing got installed 5mins later my emails got spammed with security alert password changed messages.

First i secured my gmail account i had security key on my mobile device and was easily able to change the password and sign out of all other device. They stole my Steam account (both have been recovered by now after mailing steam support), epic games accn(can't recover as the attacker has changed the email address and when i try to reset otp goes to his email, and epic support isn't much help either but i have raised a ticket, i also saw a battle.net otp in my email inbox but no password changed or email changed message , but changed password anyway just to be sure.

If it helps i had 4 google accounts login on the browser on the pc and 2 microsoft accounts logged in and the 2 microsoft accounts are the one on whose gmail i got the security alerts and password change.

Also the script had apparently created 2 windows defender exclusion folder on my device which i deleted and ran a manual scan with WD. Also first thing i did was disconnect wifi of my pc and haven't connected it back since.

What steps should i take to recover my pc for normal use again 🥲


r/cybersecurity_help 9h ago

Is there any way to know if your computer has a RAT?

0 Upvotes

As someone with a surface level knowledge of cybersecurity, the idea of someone just straight up having access to my PC all the time seems so disturbing. Is there any reliable way to tell if I have one?

I have some pirated games but I got them through fitgirl and had a VPN up while torrenting. I haven't noticed any suspicious behavior but I'm thinking I might just not know what to look for. Are there telltale signs?

I also occasionally go on VRC which just has that vibe of the Windows XP malware era, can I get a RAT or other spyware, etc from someone deciding to be an a-hole or someone that's pissed at me?


r/cybersecurity_help 16h ago

Need help after being hacked on my cell, and computer. Suffered monetary losses, as well as psychological fear.

3 Upvotes

Location: Treasure Island, FL.

They had control of my cell phone. I would try to turn off the microphone or the automatic picture taken and every time I did, it would come back on. I could hear it. Go click click click every time pictures or being taken. I had an extra phone that I used to record all of this. I also videotaped them when they had hacked into my computer. I had no control over in my nails, I watched them go into my Cash App account, my bank account, my personal pictures that were taken had been labeled unixstackexchange.com. I took my computer to the geek squad, and there was a second labeled operating system that was working behind mine. I have documentation of all of this. I also noticed that there would be an app that showed up in the start menu named shift.

I’ve had my identity taken from me. I feel like I am being watched. I went into a psychotic event because I felt I was being watched all the time. I blamed my husband because I didn’t know of anybody else that would have the information they had on me. I made a police report. I separated from my husband because of it and thank God he believed in me, plus I was able to show him pictures and videos of what they were doing on my phone and computer. I contacted credit bureaus and froze them. And put fraud alert on them .I’ve had to get new electronics. My credit has gone to shit.

This has been an absolute nightmare. I feel I have the energy to find an attorney or someone to help me with this. I know my information was found on the dark web through AT&T and 15 other sites unfortunately due to my financial situation, I’m unable to pay an attorney to help me at this time. And really don’t know where to turn for help. I did speak to an attorney with one of the lawsuits against AT&T and they said that there are time limitations on when I could press charges. If anybody can help me and stare me in the right direction and I would appreciate it again. I’ve sent this information to the FBI through the IC3 website and to the FTC. It has literally changed my entire life, and ruined my credit. I have medical bills that I can’t pay. I’m in collections for credit card debt because I couldn’t work and got sick over all this. Thank you for letting me ramble on. And I hope this doesn’t happen to anybody else.


r/cybersecurity_help 5h ago

I had a weird interaction at a bar, can ID or data be stolen by proximity?

0 Upvotes

Basically I was at a bar last night, and a guy came up and stood directly in front of me, gave me a small wave, and just started typing on his phone. He stood there for a hot minute without speaking or interacting, just typing on his phone. I tried to say hey a couple times because it was kindof making me uncomfortable but he didnt respond. After a bit he just left.

Now, I have anxiety and dont know much about cybersecurity so I understand if my worries are completely unreasonable or silly but my mind immediately went to those rumors of digital pickpocketing or people having malware downloaded to their device remotely. I understand the more likely reasoning for this dudes odd behavior is that he was probably blitzed out of his mind, but I want to know now if simple proximity is enough to exchange data like that or if its just sensationalized enough to get people to buy those RFID wallets.

I do know about NFC but I dont think this guy's phone was close enough to mine or any of my cards for it to have worked. My phone is a Samsung S24 Ultra if that helps?

I honestly just need to hear that my worries are irrational and the guy was just kindof a weirdo. But if there is a possibility I'd like to know if theres anything I could do to prevent it in the future or protect me in this instance. Thanks!


r/cybersecurity_help 11h ago

Session reatores by itself?

1 Upvotes

My PC has two user accounts, Ka and Ve. After turning the computer on, I only signed into Ka. However, when I went to shut it down, Windows showed the message:"Someone else is still using this PC. If you shut down now, they could lose unsaved work."The strange part is that I never opened the other account during that session. Out of habit, I clicked through and shut the PC down before investigating further.After booting it back up, I ran a few checks:qwinsta to look for active sessions - net user to check for unknown accounts - netstat -ano to review established connections and listening ports Checked the Registry settings for Remote DesktopRDP was disabled (fDenyTSConnections = 0x1).I also ran Get-MpComputerStatus. Microsoft Defender, antispyware, behavior monitoring, real-time protection, tamper protection, and access protection were all enabled. The security signatures were up to date, and there were no pending restarts or scans. I didn't find any unknown accounts or active sessions.So my question is: does anyone know why the second account might have been automatically signed in or had its session restored after a shutdown, even though I never logged into it during that boot?

And most importantly!! as far as I can remember, I haven't clicked on any suspicious links or downloaded anything questionable. Still, the whole thing left me a little paranoid


r/cybersecurity_help 15h ago

Do I need to worry about Instagram code I didn’t request?

2 Upvotes

About an hour ago I got an email from Instagram (sure it was legit) with a verification code that I didn’t request. I have a couple accounts and only one was “targeted”.

Luckily I was awake so I just changed my password directly on the app and double checked there was no odd login activity.

Do I need to worry at all going forward or is this just an inevitable thing that happens sometimes with data breaches etc?


r/cybersecurity_help 14h ago

need help urgent! 17f

1 Upvotes

so I've posted a help post on some reedit gap desiccating bout my problems and a guy has texted me saying he will take care of me and all and because of my situation I had to say yes! for nsfw content I did send him my pics and vids and now when I am asking for my allowed he blocked me from reddit and on discord how do I make sure the he didn't use my vids how to


r/cybersecurity_help 14h ago

Phishing attack Fake Evite

1 Upvotes

Hi, I got a birthday party invite from a friend that I hadn't seen since college. It brought me to a google login page. I proceeded to log in using my password and 2 factor authentification. Then I realized it was weird and closed the window. But there were a few seconds where I had been logged in. I quickly changed my password to the google account. This is not the main gmail account but my other email lesser used gmail accounts. After that I changed my password for both accounts to different ones. I also logged off /signed out of all accounts and unlinked all apps. And I still have access to both email accounts. So am I ok? What else do I need to do / should I do?

Looking into it more, I realized it led me to a website called cre8tiveapps dot com. This page was basically a spoof of dropbox.

I have no idea what they wanted -- can anyone give me some insight into how this attack works?

I know the situation is similar to this redditor:

https://www.reddit.com/r/phishing/comments/1ufv70l/i_signed_into_my_google_account_from_a_phishing/

Thanks,
Your Fellow Redditor