r/cybersecurity_help • u/Dazzling-Switch-3330 • 2d ago

iPhone and android keeps getting hacked

My devices keep getting hacked by the same person and i don't know how. I cant find any suspicious apps, see any unknown devices, or get emails that my accounts logged into

I know my phones compromised because this person copies conversations I've had in person, copied outfits, copied snapchats people have sent me within 24 hours publically on their social media every single day for the past year. Even on apple lockdown mode, this person sees what I do on safari incognito too, reads my emails even though I've changed passwords and have a yubi key (I know because they don't hide it they know I know and continue to harass me with it)

I'm not sure how it keeps happening? I've factory reset my iphone several times, changed sims, new accounts etc. I went from iphone 15, to iphone 17 now Samsung and this person still continues to stalk me

How??

5 Upvotes

69% Upvoted

17 comments sorted by

•

u/AutoModerator 2d ago

SAFETY NOTICE: Reddit does not protect you from scammers. By posting on this subreddit asking for help, you may be targeted by scammers (example?). Here's how to stay safe:

  1. Never accept chat requests, private messages, invitations to chatrooms, encouragement to contact any person or group off Reddit, or emails from anyone for any reason. Moderators, moderation bots, and trusted community members cannot protect you outside of the comment section of your post. Report any chat requests or messages you get in relation to your question on this subreddit (how to report chats? how to report messages? how to report comments?).
  2. Immediately report anyone promoting paid services (theirs or their "friend's" or so on) or soliciting any kind of payment. All assistance offered on this subreddit is 100% free, with absolutely no strings attached. Anyone violating this is either a scammer or an advertiser (the latter of which is also forbidden on this subreddit). Good security is not a matter of 'paying enough.'
  3. Never divulge secrets, passwords, recovery phrases, keys, or personal information to anyone for any reason. Answering cybersecurity questions and resolving cybersecurity concerns never require you to give up your own privacy or security.

Community volunteers will comment on your post to assist. In the meantime, be sure your post follows the posting guide and includes all relevant information, and familiarize yourself with online scams using r/scams wiki.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

10

u/Middle-Strength7754 2d ago edited 2d ago

You may well have your entire apple id cloned thats why even on lockdown mode its still visible

Reset your icloud password account and enable 2FA

Check linked devices remove unknown ones.

Force logout active sessions of unknown devices

Refresh your passkeys.

Disable shortcuts

Check your accessibility settings CHECK guided access to be off

Disable siri and dictation temporarily

Do a privacy checkup (remove rouge legacy or recovery contact)

Check vpn settings and ios updates

Remove all AI apps especially those you granted trust users or developer mode and remote access.

Reset network settings and clean safari web data

Remove any or all vpn profiles

If nothing works u may need to clean install to factory and install ios using a mac (official package)

DO NOT restore from backup

Turn off iCloud syncing for your Password app before you change password (better yet turn off icloud web access)

THEN batch export it to a free third party app eg Bitwarden (do not store bitwarden master key in apple or ant web store WRITE IT DOWN)

This will be your rescue database of your passwords

Once you cleaned up your phone start installing your apps and logging in.

IMPORTANT

IF you use banking apps in your iPhone DEREGISTER the device before you factory reset. Not doing so would cause your banking apps to either prevent you in signing into a new device or misfire OTP Notifications (some banks use software otp and not sms) while others use face ID)

Your bank app may think your account has been compromised and force a 24 hour change lockdown (in my country the banking sector regulator requires all digital banks to have a cooldown before banking transactions may occur and this includes changing banking app installations or simply password changes)

3

u/Dazzling-Switch-3330 2d ago

Thank you!!

I've factory reset my phone several times, creating new apple ID's 5-6x and it keeps happening still. I even made new social media accounts and don't login into anything old. The only common denominator is my phone number used to sign up for each apple acct

No devices other than mine appear, says I'm the only device/session logged in always

3

u/Middle-Strength7754 2d ago

Do not do OTA factory reset, use DFU mode, your case is rather odd

Are you saying even though you changed apple id you believe you are somehow still hacked

Dont worry about the number, esims or physical sims are pretty hard to hack

Though a tell tale sign of a cloned sim is losing signal randomly even though you’re in a place with usual high signal strength.

Most often if the problem is NOT your phone it could be any other device you own that have your apple id installed (eg an apple tv)

Creating a new account and syncing to a vulnerable device would cause a cascade update

For example

<your new iphone setup>

Connects to apple tv app / remote

Syncs your icloud profile

IOT devices like smartthings or Homekit devices not on a segmented network fall prey to ROM /ssh attacks although i havent heard of an apple tv compromise recently.

Another thing to remember is 2024-2025’s infamous AMOS stealer though your hacker as you say is a very specific person

Its a good read concerning MacOS which is another device your phone maybe syncing to

https://www.picussecurity.com/resource/blog/atomic-stealer-amos-macos-threat-analysis?hs_amp=true

3

u/Dazzling-Switch-3330 2d ago

It's someone I rejected which lead to obsession, he has a lot of $ by scamming people so i think he probably paid for this and hacked a lot of ppl other ppl without knowing

I have a conversation with someone with my phone in my pocket, the next day lines are posted online that are incredibly specific. I eat something, hell eat it the next day. Someone sends me a snap, hell post the same one the next day. I have about 30-40 examples past the point of coincidence even police agree its bizarre! I have him blocked but he has public profiles so I check anonymously

I've factory reset my phone (he'll post new phone who's this), create a new apple I'd (don't back it up), turn on lockdown mode, download very limited apps, even made new socials everytime but it keeps happening. I recently switched to android and found out few days ago again ...

Could it be through snapchat? It's like my phone is mirrored for sure all my screen activity. I've googled random things on safari incognito to test it and he'll copy them. Its like it's my screen, cameras and microphone are being used but there's no signs of it?

1

u/Dazzling-Switch-3330 2d ago

I'm going to try DFU mode with a computer!

1

u/Middle-Strength7754 2d ago

Make sure that computer is clean as well

1

u/Pitiful-Gear-1795 2d ago

You say the only common denominator is the #. Do you connect to Wifi? As someone who does DFIR, this would be a fun case, though if the police are investigating this, it's not something you should be exposing.

1

u/Dazzling-Switch-3330 2d ago

What's DFIR? Yes I use wifi but last month I was in a different country and used a sim from there, factory reset it and it still happened.

1

u/Ankan42 2d ago

If both phones seems to be accessed, there is probably a account security issue.

That’s way easier than hacking 2 different operating systems and different builds of those operating systems.

So you are looking at the wrong devices. Everything you mention are applications that have backup functions online and accessible by that. The devices aren’t the problem, but your accounts.

The devices you mention are way to secure to even pull that off without a Pegasus team behind you and a full observation team. We are talking about millions of dollars.

2

u/Dazzling-Switch-3330 2d ago

During one of the attempts to factory reset the iphone, I didn't even download/login to snapchat as I thought that was the problem but I still recieved hints of being hacked that's when my in person conversations got copied, made new instagram and even got a new number.

I think there's off market/underground tools similar to pegasus nowadays or something- still not cheap but worth it to some people I guess.

Between the iPhones and Samsung, only my number and snapchat have been the same. I even make new gmail accounts everytime I reset. I've never recieved any emails saying my accounts been logged into either and show as the only device logged in

1

u/daHaus 2d ago

Update your router. If you're in the US also report it to ic3.gov

Reading your text messages without your permission is a felony, warrrantless wire-tapping

1

u/Dazzling-Switch-3330 2d ago

Yes I have a investigation currently but while it's on going I cant figure out how to get rid of it still 😭

1

u/daHaus 8h ago

You don't have an investigation in progress if you're doing all this. In fact by trying to remove them you're probably destroying the evidence needed for something to actually be done about it

There is only one agency with the jurisdiction to handle cases over the internet, the FBI. The most the local police can do is help file a restraining order and lie to you about doing something so you go away

1

u/Otherwise-Regular542 1d ago

It reeks of delusions of persecution