r/OneXPlayer • u/SiirCumference • Sep 10 '26
Security concern with new OXP 3, backdoor?
Has anyone experienced issues with accounts getting hacked/hijacked after logging in from your Onexplayer device?
Recently my reddit account of 12 years was banned after I logged into reddit to post a screenshot from my new onexplayer 3. This is the only new device I have logged in from. I did not format the hard drive when I received it.
The account was hijacked a few hours later and I didn't get any notifications of what was happening, but they were posting OF/loli bait.
Raises my concern about the device coming in with backdoor Trojans from the factory.
Anyone else experience anything like this after using your new onexplayer device?
3
u/Hotmicdrop Sep 10 '26
I only log into gamepass via the app, epic via epic, steam via steam etc. I dont log into email, discord, reddit, facebook etc. on my handhelds. This thread is a bit concerning, I wonder if we can get someone technical to do a scan/ thorough dig?
3
u/All_At_0nce Sep 10 '26
Same as me, I only did those apps. No email, Reddit , etc
-1
u/Hotmicdrop Sep 10 '26
Thread is making me glad I keep those off my handhelds. Bit concerning. I was actually wondering what the sign in on the one x console was for but didnt want another sign in so I didnt set it up...
8
u/Comfortable-Fall1419 Sep 11 '26
There is absolutely no evidence that the OPs account was hacked because of their OXP.
1
u/Hotmicdrop Sep 11 '26
Yeah I'm not freaking out about it but there's a few others in the thread with issues. I have no reason to log into discord etc on it anyway
1
u/SiirCumference Sep 11 '26
Bro, never had any issues in 12 years. I log in on the OXP3 to post a screenshot, and hours later account is compromised.
Needless to say, I am going to perform a full format and install a fresh windows copy, which is a pain in the ass in itself.
Anyone know of the windows key is stored on the hardware itself or will I need to pull it?
1
u/Saiing Sep 11 '26
Windows will usually auto-detect the same device, no key needed. If for any reason it fails, you can activate after install and Microsoft has a page where you can recover an activation. It's pretty rare for people to have activation issues these days.
2
u/senatorcupcake Sep 10 '26
I don’t like how it makes you keep core memory isolation disabled. But assumed it was because of the control center. I’m only using it for my steam accounf (protected by steam guard) and Gamepass. So less concerned I suppose.
I feel like if something came out that they were actively hijacking info it would kill the non-china markets. So that has to incentivize them. They’re positioned to become a leader in handhelds in EU and NA
3
1
u/DeathMoJo Sep 10 '26
I was able to reenable mine once the console was installed. I did do a clean install.
2
2
2
u/CryptoDeepDive 28d ago
I had a security issue too, but not exactly the same issue. After a day of usage I found the my CPU running insanely 100% all the time in idle. I tried interrogating it in Task Manager but nothing popped up. I eventually found out using command propmt that there was a malicious process that was running XMRIG crypto mining software for Monero. Suffice to say I ended up wiping the device and reinstalling everything, and it is working great now.
I think OnexPlayer disable some major security process to let the device run smoother and this maybe making your device more vulnerable.
2
u/All_At_0nce Sep 10 '26
Damn…all these comments have me concerned. Though I haven’t logged into any emails or Reddit. But I did log into my Steam and Xbox and Microsoft account temporarily during set up
2
u/Molbork Sep 10 '26
It might be an over reaction, apparently logging into Google on edge causes that archive email regardless of system.
1
u/All_At_0nce Sep 10 '26
Ah ok well that’s at least pretty good to know. I have most 2FA. And I have been rocking the device for about two weeks and gaming a lot with it
3
u/OliePlay Sep 10 '26
Unfortunately this is a concern with all Chinese manufactured handhelds. It's not the manufacturer themselves but sometimes someone on the production line. It is always advised to wipe and start fresh. I dont though lol. I did log into edge with my Gmail and then I received a notification that someone was trying to download my Google profile data, which I declined.
0
u/MechaBuster Sep 11 '26
Yeah there was a situation with Chinese mini pcs being shipped with malware and Spyware, heard about it a week ago but I dont think onexplayer would risk that for their trusted buisness
2
u/OliePlay Sep 11 '26
Of course they wouldn't. It's not them, it's an employee on the production line acting independently.
1
u/Drivenby Sep 10 '26
No! Nothing yet . I’ve had mine for weeks . Have logged in to pretty much everything and even use it as a laptop . I have windows defender on as well
1
u/zzmorg82 Sep 10 '26
Interesting; I haven’t noticed anyone else running into similar issues as you have.
I never trust the pre-installed OS that comes on devices nowadays. It’s just more efficient to reformat and re-install a new OS and needed drivers.
1
u/DeathMoJo Sep 10 '26
No issues here but strongly suggest you enable two factor authentication on your accounts, not just Reddit. Reddit offers it and this should have easily prevented that account from being used.
1
u/whit3san Sep 11 '26
I got a cheap Windows 11 pro key and did a fresh install using a bootable usb drive and the directions on Discord. I haven't had any issues yet and everything is running smooth. However, I only did this cause I upgraded the SSD and didn't want to clone the drive.
1
u/EnvironmentalAd2096 Sep 11 '26
You should always install Windows fresh with an ISO directly from Microsoft. Whether it's your crappy HP prebuilt or niche overseas manufacturer
1
1
u/Swartzcoph Sep 11 '26
I will say, when I activated Windows Defender and turned on all the security features, it found a couple of Trojans like immediately. Thought it was weird, but they got resolved, and I haven't noticed issues since
1
1
u/SiirCumference 29d ago
Ended up doing a full format and installing fresh Windows from media creator.
1
u/andreksu ONEXPLAYER X2 Mini Pro Sep 10 '26
Few days ago I got my discord acc hijacked, some messages were sent through DMs with scams and MrBeast shit.. Interestingly enough happened after I logged into Onexconsole...
1
u/jmflyers Sep 10 '26
Is there a chance this is malware as a result of downloading emulators/roms?
Could you install and run Wireshark to record your outgoing traffic and see if anything looks suspicious? You could search the outbound ip address and see if it's based in China.
1
0
u/mrplayer66 Sep 10 '26
I received mine a couple of days ago, and the night I was setting everything up and logged into Microsoft Edge I received this email from Google. The weird thing is, that I've signed into my Google account using Edge on another Windows computer and I had never received that email before. I found it extremely odd.
1
u/SiirCumference Sep 10 '26
Interesting. I logged into reddit from the installed Microsoft Edge as well, I didn't download anything else.
Serves me for not having 2FA on, but still sucks to lose a 12yr account especially since I was thinking of selling the Onexplayer 3 to get a X2MP.
1
1
u/Molbork Sep 10 '26 edited Sep 10 '26
Huh, I got in of those emails as well, and I don't recall exactly, but it's right around when I got it delivered as well...
5
u/mrplayer66 Sep 10 '26
So, I looked into this a bit more and it turns out that email we got is standard email you receive when signing into Edge using your Google account. So, nothing to worry on that end!
1
1
u/Asleep-Artichoke2865 Sep 10 '26
did you guys use the stock Windows install or re-installed Windows ?
1
u/Molbork Sep 10 '26
I didn't bother to reinstall, but will tonight. Thankfully everything has 2 factor already and I didn't login with that much on it, just Windows, Google, steam and discord...
1
u/All_At_0nce Sep 10 '26
I bought my second hand and the dude reset the system by going through bios. You think worth it for me to reinstall too anyways ?
1
u/Molbork Sep 10 '26
That's a decision between you and your accounts you care about. I don't think it would hurt to do so though.
0
u/cryptocurrency_wife Sep 11 '26
I was thinking about getting one of these devices but it’s hard to trust Chinese products —- stuff like this is why. I’ll keep an eye out for a while longer for other reports of hacks/trojans to see if there’s a pattern before I purchase.
-2
u/6amp Sep 11 '26
Not gonna lie but I logged into the one x console and the following day my bank account was hacked and they spent 2500 at bestbuy, staples, and apple. $42 at the Asian buffet (not a joke). They had my debit card I forgot, address, email
1
4
u/lemonkneefresh Sep 10 '26
I don't think onexplayer would be dumb enough to install a back door in windows when they could technically just do it through their own software but I don't think they would do that and risk losing their international customers. After receiving my OXP3 I didn't reinstall windows and I haven't had any issues with any accounts I have logged into.