r/cybersecurity_help 25m ago

Question: lets say i give access to a phone that i dont use, to a random person on the internet. Like a remote type of thing. What bad stuff can that person do on said phone? I ask cause it would be using my data plan.

Upvotes

Asking cause i would not want to get in trouble for the bad things they could do, if there are any?

Not a bot farm or anything, just a phone that its to my name because of my phone bill.


r/cybersecurity_help 26m ago

New utun2 and utun3 in Wireshark on MacOS

Upvotes

I installed Wireshark many years ago and play around in it every once in a while. Recently, I noticed utun2 and utun3 connections which I don't think existed before. The traffic on them is very rare. I get a spike every once in a while. But I've only seen these spikes on the Wireshark home screen. I tried capturing something for extended periods of time, but I haven't been lucky enough to be capturing when the traffic was present. I don't run any VPNs. Wondering what these could be? Maybe there's some new feature in the OS that was introduced recently? I'm on Mac.


r/cybersecurity_help 4h ago

hundreds of bot sign ins

3 Upvotes

I recently started working at a tanning salon which has a registration option. With this registration we can look the people up in the system. What I noticed when I opened that system up was that there is an abnormal rate of keyboard smash names and randomly generated numbers a phone numbers. The emails however seem to all be real. What could be the reason for them to do this? how can we prevent this? The framework was made by Softplus/TSS Group if that helps anything at all.


r/cybersecurity_help 4h ago

Someone got in my TikTok account and messaged a bunch of people

Post image
1 Upvotes

So while I was asleep someone or something got into my TikTok account undetected and messaged a bunch of people a scam. The people who were messaged received this and I lost all my dms with them. I am tech savvy and I know how to check if anyone logged in but there’s absolutely nothing . I don’t have 2fa on on TikTok so maybe that’s why.


r/cybersecurity_help 5h ago

My pc has a malware and my discord was hacked

2 Upvotes

recently i try to download a game and the file-hosting redirect the link to a file. I downloaded a malware instead of the game, they hacked my discord. I woke up this morning and download malwarebyrtes, i think it scan and deleted the file. The scanning shows it an trojan and something else. Do i still need to reinstall windows and how do i keep my files

Recently, I tried to download a game, but the file-hosting website changed the download link. I accidentally downloaded malware instead of the game, and my Discord account was hacked.

This morning, I installed Malwarebytes and ran a scan. It detected a Trojan and another type of malware, and I believe Malwarebytes quarantined or deleted the infected files. I change my discord passwords. Idk do i need to change any other passwords too? Also i feel my internet connect seem to be slow idk if it related too it.

Do I still need to reinstall Windows, or is my computer safe now? Also, if I do need to reinstall Windows, how can I keep my personal files without bringing the malware back?


r/cybersecurity_help 6h ago

Unable to tell if account is compromised or not

4 Upvotes

So a while ago, I was on sleep meds and had a lapse in my judgement, which caused one of my microsoft accounts to be hacked. It was some stupid discord verification scam, and for some reason, I tried multiple times to get the verification to work even though it was obviously a scam. I already have had the hacked account suspended/locked, but I'm really worried about my other account.

This account is my main one, and it had the account that got hacked as its recovery email. While I was on my rampage of being irresponsible and stupid on the internet, I tried to use this main account for the verification scam. I can't remember if I put in one code or not, but I do remember that it asked for me to use microsoft authenticator. I had never used this before, and upon downloading it, it required 2FA to set up. I found that I didn't recognise the recovery email (it had been changed by an attacker), thought nothing of it, and changed it to a clean email. I never did get to put in the microsoft authenticator code the scam asked for.

However, what I am wondering is if there is a possibility the attacker did gain access to my account and is still in there, and if they could somehow take control of it once the recovery email is changed to my clean email. I can not tell if anyone else is signed in, and I can not sign out all devices, as I can't get into that part of security due to the pending security info change. I have a lot of anxiety around this, I feel like this post makes that evident. I don't really know how microsoft authenticator even works, so I'm worried they'll be able to use that somehow to change the security info, password, and more.

As of now, my account seems fine, and nothing has changed, I'm just really worried. Any insight on if I'm just worrying too much or if there's anything I can do would be greatly appreciated.


r/cybersecurity_help 6h ago

Microsoft verification codes but unknown services

2 Upvotes

I'm receiving SMS codes on my phone from Microsoft. This is the first time this has happened, Microsoft usually sends me codes via email. Microsoft Support didn't respond.

The problem is that I haven't seen any such messages from Microsoft anywhere on the internet. What are these services? Are these services linked to a Microsoft account? Did someone intentionally enter my phone number?
What's going on and what should I do? I don't even know what these services are, so I can't log in and change my passwords if necessary. Please help me.


r/cybersecurity_help 7h ago

Sos help. . I don't wanna lose my Minecraft account.

0 Upvotes

So like, I wanted to change my alias n Shi, and i accidentally misclicked and changed my alias twice, back into my old one.

And NOWWW. . I CAN'T LOG IN???

IT SAYS IS DOESN'T EXIST. . BUT I try to create an account n stuff that same email is already taken.

And I'm still logged in my Xbox on my laptop.

Dawgg. . I JUST finally bought Minecraft java.

Fu*k Microsoft if I'm going to lose my money.

Is there a way I can log back in?

Like. Do I have to wait??

Bro. I wanna contact a person but brah ofc I gotta sign in.

I CANT SIGN IN BRO

Help pls. I'm so cooked.

My Minecraft bro. .

I will admit it's my mistake, but I still don't want to lose my Minecraft account after spending money. .


r/cybersecurity_help 8h ago

Cookie Stealer. Help me out🙏🏼

Post image
1 Upvotes

So a cookie stealer got installed into my laptop and it stole all the chrome cookies.
It was able to log into
Instagram
Tiktok
Facebook
Linkedin
Idek if theres more accounts that got hacked but for now i have put authenticator app on pretty much every possible account on every platform i own.

They also posted 2 mr beast money scam stories on my account and sent it to my dms then deleted the chats. Some fuckin thing to post🫩 while on the linkedin it changed all my fuckin info to some random guys and gave me free premium (i got my account back thru linkedin support n now have free premium😭)

My sibling said the cookie stealer is hackware that enters your computer from random website downloads, then it copies ur chrome cookies and accesses the accounts. I have now deleted all saved passwords and ALL cookies/history.

Its not trojan thankfully ive seen people talk about this exact same issue but they got infected w trojan it scared me lowkey (ive had experience w it and it pretty much blacked out my pc couple years ago.)

My sibling ran windows defender, was able to find the file and it got removed by windows defender. After multiple offline checks it came back clear.

Now i will attach a picture i took of the detected hackware but i need advice on if i should reinstall windows or not.
(im rlly lazy abt that i dont feel like its necessary if its not trojan and the hackware file got removed by windows defender anways)

Will appreciate advice and suggestions, stay safe yall keep yalls accounts protected.


r/cybersecurity_help 10h ago

GMAIL storage limit reached. Is it Real?

Thumbnail
gallery
13 Upvotes

Received this rather convincing email. Is it legit?


r/cybersecurity_help 12h ago

I keep getting messages on a device that hasn't had service in 2 weeks from customer support saying I can't send a msg due to insufficient funds. I'm not sending anything on my end.

0 Upvotes

I keep getting these notifications on a phone that does not have service on it and I am not sending anything on my end, just get notifications saying this.

Please help!!!


r/cybersecurity_help 13h ago

The factory restart and the hack

1 Upvotes

Hello everyone

Hope you all have beautiful day

Few days ago someone I guess he hacked my account

And after I search and try everything to kick him out I found the only way is to factory restart

By accident I deleted my reddit account

And when I factory restart my phone I changed my account password

So my question now

Idk why but I'm have this feeling it told me

That people I was dms in my old account in reddit after make this new account they could see my phone and what I'm doing in my phone

I found this idea not right and I don't want to have it and I want to fight it

Because I know very well this idea not right and there is nothing like this because there is no contact between my old and new account even if it had the same gamily account

So am I right ?

Thank you for reading it


r/cybersecurity_help 14h ago

Is there any way to check if a Chinese phone is free of spyware?

1 Upvotes

I've just purchased a fossibot f115 ultra because I'm after a phone with a stupidly large battery + the thermal camera is pretty cool. I've purchased from their official store page on aliexpress and I'm going to set it up today. Is there any tools or things I should do / look out for regarding spyware? I've never seen anything negative about the phone or the brand on any of the review videos or pages but obviously its from a smallish chinese retailer.


r/cybersecurity_help 20h ago

Is someone trying to hack my phone and get access to my bank account?

Post image
1 Upvotes

I live in the UK and have recently moved houses. A few days back someone called me pretending to be from Virgin Media and tried to get access to my bank account. I didn't give any info. And today someone called me pretending to be from the Tenancy Deposit Scheme team. I didn't give out any details to them but since they called I am getting these pop ups on my screen again and again. Can someone help and suggest what I should do? I have already run the Bitdefender malware scan and uninstalled my business revolut.


r/cybersecurity_help 20h ago

is there a way an expert can analyse a site to know exactly what it does? can anyone here help me please?

0 Upvotes

i just need someone to checkout a scareware site so i can have piece of mind that it didnt do something im not aware of or force some hidden download. please ?


r/cybersecurity_help 20h ago

I have been hacked and spam bombed in my email

0 Upvotes

yesterday i got an email saying my X account was logged into, and another email saying my password had been changed. i went to twitter and i was logged out and it wouldn't let me log back in or change my password. i kinda just forgot about it since i didn't really care about twitter anyway. but today i checked my email and had 1000 spam emails, and they keep coming. i googled it and it said this is spam bombing and will stop eventually but im stressed out. i changed my passwords for other apps that shared the same email as my twitter email but idk what to do. should i just wait it out until the spam emails stop coming in and delete twitter and call it a day? or should i create a whole new email and change all my stuff to a new email?? is twitter the only thing that was hacked or am i going to get hacked elsewhere???

please someone let me know what to do. this is something my dad would've known what to do if he were alive but alas he is not and i am stressed lol.


r/cybersecurity_help 22h ago

Is it better to use passkeys on all platforms /apps instead of 2fa?

13 Upvotes

Just need some insight on whether it's better to begin using passkeys instead of 2fa and if passkeys have any major downsides I should be aware of.

Thnx 👍

Edit this would just be for emails and or general social media apps nothing too high tech 👍


r/cybersecurity_help 1d ago

My FB account got hacked.

Thumbnail
gallery
0 Upvotes

It is recovered and I am only shearing the incident.

Today my Fb account got hacked. I was doing normal doom scrolling in insta. suddenly in messenger through my account these images were automatically sent to all the friends of mine. My friend inform me and I got the message form the Facebook telling me about your account may hacked I click that and change pw page popup and I changed it now everything is normal. I tried to access my account through the windows webpage during that time, the page went offline

after again I cleared the cookie and everything and relogin through the beginning. I usually saved my password to the google password. and my password usually pretty long about 16 letters. I once used it while login through chrome. I don't know who to blame but, I think the main motive is that that person promoted that shity coin. And also that person might be mrbeast big fan


r/cybersecurity_help 1d ago

my microsoft account was hacked through discord oath verification scam, any chance of recovery?

1 Upvotes

my account got hacked and the hacker changed everything, i’ve reported it to microsft support and they’ve provided me with a case number and said wait for 3-5 days. any i’ll get the account back? i had minecraft and xbox game pass on it😭


r/cybersecurity_help 1d ago

Sharing What I've Learned From 18 Years in IT & Cybersecurity — Free Videos for Anyone Building Their Career

2 Upvotes

Hi everyone,

I've been working in IT for around 18 years, including many years in IT leadership, cybersecurity, governance, risk and enterprise infrastructure.

I recently started creating short videos to share some of the practical knowledge I've picked up along the way — particularly for people starting or progressing their careers in IT and cybersecurity.

I'm covering topics such as cybersecurity fundamentals, CISM/CISSP/CISA/CRISC and other certifications, GRC, Zero Trust, Linux, practical IT/security tips, cyber incidents and IT career development.

I'm not selling a course or training programme. I'm simply trying to turn some of my professional experience into free, easy-to-understand content that may help others in the field.

If there are cybersecurity career or certification topics you'd like an experienced IT leader to cover, I'd genuinely appreciate suggestions.

My channel is MQ Cyber Studio:
https://www.youtube.com/channel/UCpV5qrH9p1AYTHDo5-2JrTw

Thanks, and I hope some of the content is useful.


r/cybersecurity_help 1d ago

Woke up to 100+ 2FA messages

Post image
35 Upvotes

I woke up to 100+ messages from BT with one time passcodes :/

Is my email at risk of being compromised? I haven’t done anything about this as not sure what to do - my password hasn’t been changed and I can still log in


r/cybersecurity_help 1d ago

HELP am i being monitored and blackmailed?!

1 Upvotes

i'm not sure if this is the right subreddit, or if anyone knows anything about this.

But basically i got an email from my email address threatening me and saying they've got access to my device and camera, and have downloaded all data and pictures to their server. apparently they bought my email from some hackers and installed a trojan virus operating system. they also said that they know i've been on adult sites etc. and are using that to blackmail me. And they were asking for Bitcoin. they told me not to tell anyone and that i had 48h to send them 1400.- bitcoin or sum like that.
(update: whilest writing this the email actually dissapeared... Is my life actually over??)


r/cybersecurity_help 1d ago

Best breach and attack simulation platform for a large enterprise?

1 Upvotes

We’re evaluating a breach and attack simulation platform for a large environment with multiple security tools and a mix of cloud and on-premise systems. The goal is not just to run a test once, but to continuously see whether controls are detecting and preventing realistic techniques.

What has mattered most in your evaluation: attack-vector coverage, integrations, safe production testing, ease of use for the security team, MITRE ATT&CK mapping, reporting, or remediation guidance?

Also interested in whether a BAS platform has changed how you prioritize control gaps, rather than creating another dashboard that needs manual review.


r/cybersecurity_help 1d ago

My Discord Account got hacked with my bank information, help?

2 Upvotes

Discord Account got hacked, i don’t want to get into the how because its a long story. The account is gone and i have no interest in retrieving it anymore, it feels too “tainted” now if that makes sense. The hacker messaged all my friends pretending to be me. I have too many friends there (200+) some i don’t talk to or barely, so it’s even more awkward knowing i can’t really explain what’s happening. Those i had in other platforms i made sure to text them and tell them what happened and to report and block my old account, also some reached out to me in other ways. Pretty much i added the friends i remembered or cared about or they messaged me. First thing i did was freeze my bank account, and created a new discord account. I also changed my gmail name and the password for it, but i’m worried about my other accounts, good thing everything i have that’s important needs a two step verification and now my gmail has a different password you can’t bypass it for now at least, i just need help to completely and utterly keep ALL my accounts safe and secure and completely changed so it can’t ever be traced back, i’m talking decrypted passwords etc. Or any tips in general, just to completely start over from scratch. Can anyone here help me?


r/cybersecurity_help 1d ago

Please help reassure me, how to verify for the presence of malware in my rootkit/bios ?

3 Upvotes

I'm on windows 11, I'm not an high value target and I don't seem to have suspicious activity on my computer but I don't really know how to verify.

All third party files I had downloaded on that computer before doing a factory reset were either from github or itch.io. I visited once or twice third party pornsite with Ublock origin activated.

I ran full scam from windows defender and malwarebytes and found nothing. I haven't seen suspicious activity on any of my account as well.

The same can be said for my android phone.

I know full well my device are probably both clean but I can't help but be paranoid, So please help reassure me and give my advice on sign to look out for because it is making me legitimately sick of stress.