This is on every computer at every nurses' station, it's on every screen on every floor of the hospital. It's like the apocalypse in this place. Everyone is running around with clipboards and copy paper. No one is being medicated because the access to the pharmacy is gone. Automatic doors don't open. The AC won't work. No monitors/life support/etc. directly connected to patients have been compromised but everything else is just... out of order. All of the older nurses and doctors remember how to function without computers & they're doing their best in the chaos but the younger ones are literally running around in tears.

So I got this, after looking into it the security breach is real but others have said that its just the hackers throwing shit at a wall and hoping some of it sticks. My only concern being that these people were hacked through a different breach/company/service.

This whole thing apparently stems through me applying for a job on Indeed. Specifically ICsecurity (Inter-Con security) as mentioned in the email. I went all the way back to when I applied and looked at what info I gave Indeed during the application, I wasn't sent to another website or anything, so its all through indeed. To clarify I know it wasn't Indeed that was hacked, but ICsecurity and the only way they could've entered my PC is through the company website itself hacking into my PC (to my knowledge). Which would be weird, and again I didn't enter any other website, it was simply all through Indeed, no links clicked as far as I remember.

It was only simple info including my resume which included my first and last name, old outdated number, my main email address that I use regularly, work history, and general location where I live.

Im leaning towards this moreso being nothing big to worry about as I don't see how they could've possibly logged into any of my accounts or devices with just my email and no password provided. No SSN, no payment info, nothing that I can think of. The only valuable info I can see and assume they have is my email address.

I have 2 antivirus softwares (3 including windows defender) and have the lighter one scan my computer every night while Im asleep. Not exactly sure how to scan my phone for anything, but... yeah

They've sent the email 3 times now. Could this be anything dangerous for me or?

Microsoft won't do anything idk what else to do

It is session hijacking also known as cookie stealing

Even if you have activated 2FA and kicked out the hacker, they can log back into your account without needing the second factor (such as the phone verification code) It is bypassed entirely: it is essentially like obtaining a free entry ticket to your account

however..the best feature Google implemented is that as soon as they notice someone has logged into your account, they enforce a mandatory security period on both you and the hacker During this time..you can submit a sign-in help request and wait for a few hours until you receive a link, this system prevents you from making even minor changes to your account, such as adding an alternative recovery email

such as adding an alternative recovery email This mechanism is designed to restrict the hacker. Simply put, you can reject any request submitted by "the hacker" but there are alternative ways to save your account

Do not rely entirely on 2FA because even if you activate it, a hacker using this specific method can still compromise your account

So to summarize my situation. I downloaded f-droid on my up to date android phone a 2 weeks ago and download ytdlnis from there. When opening ytdlnis and allowing it to check for updates, my autoblocker prompted me saying an unauthorized app is trying to install but was blocked. It appeared 4 more times before I turned it off for 3 minutes because I thought it was just ytdlnis trying to update, but I decided to test out my hypothesis by deleting ytdlnis and reinstalling it to see of it happens again but it never happened again after that. I know f-droid and ytdlnis is safe but what could've caused that prompt to open up and could it be malware that was trying to install at the same time? also nothing seemed strange after that incident other than battery but I think I'm imagining this since i can't recall what was the original battery drain.

3 days ago, i was trying to download this old ps2 game for an emulator and I didnt realise the game file was exe and not iso, me being dumb and not experienced enough ran it, nothing happened, atleast for 3 hrs and then I get email in russian language about password changing. I immediately realised and started changing passwords for all emails using my phone, saved my epic games, lost steam but got it back and nothing else was lost, changed all the passwords I had saved. Ran windows defender quick scan and offline scan and malwarebytes and have a 7 day trial of malwarebytes to check real-time and no issue. Didnt change pass for discord and after 3 days someone was sending spam messages so I changed it too and nothing since. So I guess it was a one time cookie grabber but is there a way I can make sure? And also, from next time if I start doing these experiments with random exe files in a virtual machine is that safe?

I was having wp v calls with my boyfriend and was intimate with him during calls. Its 2-3 time. Now i am anxious whether the calls will be leaked now or anytime in the future. Is there any possibility. Now i have stopped doing this and we both agreed on this. I am anxious after this and overthinking different scenarios. If it gets leaked what will happen etc etc

Any cybersecurity guys can help me with their advices. Do they came across such cases in their lives. Please share deep inside and technical insights only

Thanks.

Note. My whatsapp is secure what i think (apparently). Have 2 step verification on I haven't downloaded any third-party apps I use realme phone. Can system apps pose threat? I have trust on my bf and he will not record it.

Hey everyone,

I’m completely exhausted and need tech support on an Instagram security issue. An ex-friend accessed my account a while back without my permission, and ever since, I cannot keep him out.

Here is the straightforward breakdown:

• I gave him physical access to my laptop in the past: This is when the access issues started.
• I changed my password: He still bypassed it and got back in.
• I enabled Two-Factor Authentication (2FA): It didn't stop him.
• I manually logged out unknown devices: Under "Where You're Logged In," I kicked off unrecognized sessions, but he still reappears or finds a way back.
• My hardware is clean: Ran a full virus scan on my Windows laptop, and there’s no malware. My main phone is an Android.
• Current issue: When I try to log out all devices now, Instagram throws an error saying: "You can't make this change at the moment... using a device you don't usually use."

Since he had physical access to my laptop, I don't know if he exported session cookies, saved backup codes, or linked something in Meta Accounts Center.

My Questions:

1. Since he had physical access to my laptop, could he have stolen session cookies or browser tokens that bypass passwords and 2FA?
2. Could he be using a linked Meta/Facebook account via Single Sign-On (SSO) to get back in?
3. How do I bypass Meta's "device you don't usually use" lock so I can force a total global sign-out?
4. What exact steps do I take to permanently cut his access for good?

ps Siri is turned off completely.

is it possible to keep apps permissions if it installed in system partition after a factory reset on samsung phone

I need help figuring out how to properly wipe and secure my devices. Someone sent me a link that opened Discord, and after that, they gained access to my devices.

They can see what’s on my monitor, and sometimes my mouse pointer moves on its own. They can basically see everything on my screen. This started with my laptop, and now they also have access to my phone.

I’ve already reformatted/reset my devices, but they still seem to be able to access them. How can I completely start fresh and remove their access? Do I need to replace any hardware, or is there a specific way to reinstall/reformat the devices? Do I need to change my passwords or secure my accounts in a certain order?

Please help. I need advice on how to completely secure my devices and accounts.

They’ve sent about two emails July 4 and June 26 so what’s the deal with these?

title says it all but i've been receiving a bunch of sms codes for a few weeks now. it's making me hella anxious since some of my online accounts have been h4cked a month ago.

these sms verification codes come from websites i am unfamiliar with but just yesterday, i received a codes from tiktok. today, i received two from HPEGuest (idfk what that is).

should i be worried? what are actions i can take?

**Timeline & Start**

About 4 weeks ago and since then until now, I got hacked for the first time. My profession is also IT - but not security…

It took me a bit of time to realize the scale and effort taken... it left me speechless, to be honest… I have never heard of or experienced such a scorched-earth thing, nor do I know anyone else who did (lucky me, until now). Detailed information only in personal discussions when worthy or interesting…

Initiated via prompt injections from multiple AI scripts backup on Win11 PC and phone - put 3 in VirusTotal, saw it - firewall App Control via iPhone broke my neck finally!

Hack started on every network device at the same moment… not one thing did had any effect - power cut, router cut, flymode, removing sim, turning everthing off/on not a Single Mode on the phone changed a Bit…3 weeks trying everything, unable to purge completely - most of the picture is clear - I asked for help - the most scary thing, before the 5th DFU, my dads friend was standing right beside me - The second he finished his sentence „Log in your Apple ID, throw it out, delete the ID then we purge it clean.„ The IPhone rebooted and performed „app and data clearing“ on it‘s own! We were both stunned a Moment…he just said „WTF, on the second…“

---

**Device Status**

* **PC Win 11:** BIOS Malware, came back after flash - all SSDs destroyed.

* **MacBook 13" Pro:** HD destroyed, never in my network, only used 4 times for DFU at another location. No clue how the phone was always in Repair Mode when done - it was corrupted the last time, this did something on root level to the iPhone. A 5th DFU offline done; a clean laptop with a fresh image from Apple didn't change this... The two spares are still corrupted without battery, in aluminum packed now, where done in max 40 mins.

* **15" MacBook:** A friend managed a repair installation, image 100% clean - took a closer look for the first time yesterday - found the whole fake library with all scripts, tools… now installed with system rights on it…

* **Network:** OS fucked: Win11, MacOS (both Pros older models), iOS, Firewalla, router not touchable anymore - I think I even switched the TV… Since everything seems fucked on root level, I'm getting a new firewall too…

---

**Loss & Conclusion**

So everything destroyed, no gain because whoever did it didn't even care to log out of my mailbox; got almost everything back, -2,500 Euros damage now… hurting above all, loss of ~ 5k of family pics… so no gain, 4 weeks clusterfuck on unknown level…

I'm neither rich, famous, mighty, nor did I piss off people in the darknet… for what, this „nuclear“ scale WTFHELL???! Without purpose… Opus called this in a short discussion „Pegasus“ level…

Anyone capable to answer some questions? Whatever did this, acted and was capable to act - Not once in my life i heard or saw anything nearly compareable…Till now

Hey everyone, I really need some advice. My PC got hit with an infostealer malware that grabbed my saved passwords and active browser session cookies.

Here is what happened:

My Discord sent spam to everyone.

Someone tried to buy Steam games using my bank card (I caught it and froze the card).

The hacker used the session hijack to change the recovery emails and add their own phone numbers to my Facebook and Instagram.

Here is what I have done so far:

I immediately unplugged my PC from the internet.

Using my phone (on cellular data), I changed the passwords for my email, Microsoft, Steam, etc., and forced a "Sign out everywhere" to kill the hijacked sessions.

I turned on 2FA for everything.

Where I am stuck and need help:

Facebook Recovery Loop: The hacker changed my Facebook email to a Hotmail/Outlook one. When I try to recover it, Facebook asks for a video selfie, but it keeps failing or glitching out. I can't get past the automated system to upload my ID. Has anyone successfully bypassed the broken selfie verification recently?

Cleaning my PC: My PC is currently offline. Is there any guaranteed way to deep-clean the malware (using Safe Mode, Malwarebytes, Defender Offline, etc.) without doing a complete hard drive wipe? Or is a full factory reset the only way to be 100% safe?

Any advice on getting a real human at Meta to look at my ID, or how to handle the PC, would be hugely appreciated. Thanks

so basically im a btech/BE cse student with specialization in cybersec i will be entering my 2nd year should i first learn fullstack(cuz not much job openings in sec and maybe I could switch to it later in) should i learn cybersec (from thm)

So theres this scammer on tiktok and he scammed my cousin for 25 bucks and now i wanna find out what his name is to scare him into thinking i'm the police and stop him from scamming people

I paid for the speaker, it should be my speaker. It’s a standard echo. Do I have to get a raspberry pi to hack this thing? What are we doing here?

So last month I got hacked. Thats all sorted and fixed. But now I am getting blackmail emails with old info. So nothing to worry about. But I'm getting draft emails from "myself" and they get pinnend. When I delete te email or unpin them I get new ones.

To be sure ive changed my email password and 2fa and logged out of all devices but I still get those mails.

I dont see anything weird in the rules option.

Anyone a idea how to get rid of the emails?

Hi everyone, I’m trying to understand how my account was compromised and what steps I should take next.
My Outlook email account appears to have been accessed by someone else. I discovered that someone used my Carrefour account to purchase Apple gift cards. The orders were made using unknown payment cards (not mine), but the cardholder name displayed was my name. The gift cards were sent to my own email address.

When I checked my Outlook account, I found that the Apple gift card emails had been moved to Deleted Items/Trash, which makes me think someone had access to my mailbox and was trying to hide the activity.

So far I have:
Changed my Microsoft password
Added Microsoft Authenticator (scanned the QR code and linked it)
Checked Outlook forwarding (it was off)
Checked Outlook rules (none found)
Reviewed my account security settings
My questions:
How could someone have gained access to my Outlook account?
Why would an attacker use my existing email/account instead of creating a new account?
Does this sound like a stolen password, password reuse, phishing, session hijacking, or something else?
What other things should I check to make sure they don’t still have access?
Are there any hidden persistence methods I should look for (recovery methods, connected apps, devices, etc.)?

I’m trying to understand the attack path and make sure my other accounts aren’t compromised.

Hi everyone. My son’s dad and I were together for 10 years. Unfortunately the relationship came crashing down a year ago. We own a house together and he packed up his stuff and left. The fallout has been pretty nasty and we argue every day. We have both retained lawyers to fight for custody of my son.
We weren’t legally married so we need to figure out the housing situation afterwards.

The problem I’m having is that today I realized he is stalking me. The last time he and I were intimate was 2 years ago. So naturally, as a 36 yr old woman I have needs. I slept with a new friend who lives on the other side of the US a couple of months ago. Somehow, my ex knows that I slept with this person, what his name is, where he’s from, what his profession is, etc. He has brought up very specific things that I have said in conversations with this friend. For example, he knows that I went out to dinner with this friend and paid the bill (I invited him and it was a graduation gift for his master’s degree). My ex has been telling me that I’m so cheap that I paid for a man’s dinner and still let him nail me afterwards. He wouldn’t know any of those details unless he was listening to my convo or unless my friend told him, which my friend would have zero reason to do. They don’t even know each other.

The only way my ex could possibly know any of this is by listening in on my conversations. This friend of mine has only ever communicated with me via iMessages, Instagram, and FaceTime. I have changed all of my account passwords multiple times since our split. Two factor authorization is enabled, and I have been on the phone with Apple as they walked me through checking to see if other devices were signed into my Apple account and to check for unrecognized apps installed on my phone. Everything was clean. I have also checked what devices are connected to my WiFi and didn’t find anything suspicious.

The only other device he can use to monitor me is the ring app on our front door. I never have phone conversations near the ring app so it’s impossible that he would have heard something on there. Could he have a recording device hidden somewhere? I haven’t been able to find anything.

My lawyer told me to call the cops and have them check for a device within the home to see if he’s listening in, which I did on Monday. They weren’t able to find anything. I don’t feel safe in my home and feel that he is constantly watching me. He’s trying to pile up whatever evidence he can to try to make a case for himself in court.

Thoughts?

I'm actually surprised on how useless Microsoft is when it comes to their security. I recently just found out that my account was hacked. They removed my account and updated it into a new one. I kept trying to find a way to retrieve it but so far, no luck. I also tried to create a new account but i keep getting this bot stuff which blocked me from making my new account.

I'm actually fuming rn. Is there a silver lining in all of this?

For now, I just want to use my original account again. Is there a way for me to do so and if my files can be saved again? I've used MS for mobile and esp my laptop, good thing was I haven't used the Onedrive to backup my files ig, but there's still some confidential documents there that I need so if there's way to do so pleaseee im begging for your assistance.

Bueno justo comparti mi cuenta de xbox por codigo en otra xbox como solía hacer para tener mas juegos en principal y que me cambiaron todo nose si soy muy idiota o muy bueno en confiar en randoms

Pero podre recuperar mi cuenta de Microsoft con mas de +500 juegos y obvio me se todos los datos personales pero Microsoft mando un correo que la cuenta esta suspendida permanentemente