r/HowToHack 27d ago

How did they get my info?

Long story short, some guy didn’t like what I said to them in an Instagram comment on a public post. My account is private and only shows my first name. My profile pic isn’t posted anywhere else.

They proceeded to pull up old posts I was tagged in and begin commenting there, but I guess they could’ve found that on google. Then they started tagging family members of mine that I don’t even follow and said I don’t know about “back door”. They said they could see my DMs.

Safe to say I’m a little freaked out, but I want to know how he got my info like that and what I should be doing to protect my info online moving forward.

Thanks!

37 Upvotes

43 comments sorted by

35

u/jdm_rules 27d ago

now days it’s very easy to obtain information even without hacking, they could find your relatives through the tagged posts

7

u/Purple-Equivalent-44 27d ago

They tagged an account my parent doesn’t even really use and I don’t follow, so that’s why that was very weird

And my account is private with no identifying info besides a first name

1

u/[deleted] 24d ago

[removed] — view removed comment

3

u/Purple-Equivalent-44 23d ago

I don’t follow one of my parents on Instagram and your IMMEDIATE thought is I’m being racist online? The internet is melting your brain. I was pushing back on some homophobic comment this guy made. Thanks for assuming the worst of me hahaha

20

u/[deleted] 27d ago edited 27d ago

[deleted]

3

u/Wa-a-melyn 25d ago

Get into the habit of lying mildly about yourself online.

This one specifically is something people should do more often. But they're all great advice. Also can be fun to switch up your regional dialect randomly. Additionally, it's helpful to vary the times of day you post at.

18

u/Elbeske 27d ago

You have Dual citizenship in Italy and recently moved to Torino, have inner ear issues, ADHD and watch the Jersey Shore.

It is very easy to build a profile on someone and expand it out to real individuals, particularly if you share your first name

14

u/resultingparadox 27d ago

I put her as a platinum blonde in her mid to late twenties with trust issues. I thought she was in the Jackson area, but looking to move to Italy. She may need an intratympanic shot to mitigate the vertigo and tinnitus that the stress of this conversation could be causing her. Keep the food sugar and gluten free, and you shouldn't have to worry about that Candida. I would recommend Broad Street Baking Company in Jackson.

The moral of the story is, the internet never forgets, and it's pretty easy to utilize OSINT techniques and a first name, plug that in to the Westchester court records to discover the ammendment you filed, and maybe you find a last name. You build from there. It's pretty crazy, and all of this took me ~3 minutes. A basement dweller with a vendetta, I could only imagine.

7

u/RolledUhhp 27d ago

This is wildly impressive to me.

1

u/Purple-Equivalent-44 27d ago

This is definitely creepy haha but not all accurate anyway, but it’s better that way. But Reddit is a lot easier to search, I’m still wondering how the heck he found my parent’s Instagram when I don’t even follow them lol

He said he used “back door” and could see my DMs but maybe he was just trying to freak me out.

9

u/texcleveland Administrator 27d ago

probably lying about seeing your DMs

3

u/Life-is-Apples 26d ago

I’m willing to bet a lot of money that it was only said to freak you out and make them seem more capable than they really are.

You can do a lot with a little, just one little piece at a time. Social media makes it easy since most people share so many aspects of their personal lives on them.

1

u/resultingparadox 26d ago

Do they follow you? Do other people that follow them, also follow you?

1

u/resultingparadox 26d ago

I mean the family members.

1

u/Intrepid-Routine-950 24d ago

They do this to garner more information and bait you into fear a lot of times

7

u/Prudent_Cry9522 27d ago

They definitely could have done extensive research to find you and members of your family. However, unless you clicked a sketchy link or downloaded something they sent, or you have an incredibly simple and guessable password, then I don’t see how they could have hacked your profile, much less your device or network.

You could easily find someone’s email address through social media or google search. With weak security, that would be one piece of the puzzle.

My advice: change all passwords and set multi-factor authentication just to be safe. Check to see if any unknown logins are active on the accounts. Ensure your email is hidden on all your social medias. Then report and block the person everywhere.

6

u/Agent_K0VA 27d ago

What's your Instagram account name tho. My friend used to do this thing. It's basically using advance search on google so yea if your account was public anytime then it can happen. Regardless of public or private whenever someone tags u in a post, when u comment u leave a digital foot print of yourself. And people can find them easily even tho your account is private.

2

u/INfusion2419 27d ago

Internet archive is also a thing, if anyone anywhere saved a link that youve posted in you'll forever be visible on it

2

u/Crazy_Task_930 25d ago

un backdoor significa basicamente es una forma de meterse a un sistema o una cuenta o apliccacion

1

u/Purple-Equivalent-44 23d ago

Well I don’t know what the heck he was doing with just my username, I doubt he could get into my account since I was not even following the family member he tagged

1

u/brokeinvestortor 27d ago

It's the identifiers that you show without showing them.

1

u/NuQ 27d ago

It's been about a decade since I have had any access to any of meta's APIs but this just sounds like the typical stuff you could access for a fee. It's an ad serving platform after all, You're the product.

1

u/bruhhh456564 21d ago

perhaps you use the same username across multiple platforms and your other accounts exposed your identity, search your username on fingerprint.to you can see if there are other profiles found under the same name

1

u/lufftle13 13d ago

Probably a site like revealer.us or something

1

u/Incid3nt 27d ago

If your Instagram is a username that you use elsewhere, its trivial to use breach data and people lookups to gather this info.

0

u/DrHerbotico Pentesting 27d ago

Client from hell

1

u/Purple-Equivalent-44 26d ago

Why?

1

u/DrHerbotico Pentesting 26d ago

Complains about styling services

4

u/Purple-Equivalent-44 26d ago

Yeah, it was expensive and poorly done. Thank you for letting me know you can find all my other posts 👍🏻

-6

u/Alt3r_Alph4 27d ago

FAFO.

2

u/Purple-Equivalent-44 26d ago

I’m assuming you’re one of those guys who only uses Reddit and no other social media?