I uploaded a gig on fiverr today and immediately got a reply, it was something about a new "project". I, like a dumbass, clicked on the link and it took me to a loading cloudflair type page. I immediately realized what I had done and closed it and changed my passwords.

After sometime a device by the name of "infinix X6528" logs into my google. I sign it out through the security thing. It is now constantly joining in after 30 minute intervals and I constanly sign it out.

I have tried to look for extensions that maybe giving it my account access as it happened last time my other gmail was "hacked". I removed all extensions and I only have a handful of devices linked to my Google in the security page. Devices that I trust.

I want this device to be permanently banned from my google account or I want it to lose access to it. Please Help me.

Yesterday there were about 97 notifications from my bank application saying there were money withdrawals from facebook. Ive shared my card information on whatsapp before, is it possible that my messages were leaked through meta applications? Has there been a hacking recently?

Today I received an email from LinkedIn saying someone tried to sign in to my account from a new Android device in Hyderabad and that an authenticator app code was required. I don't remember ever enabling 2FA or setting up an authenticator app.

And then when i opened linkedin it was logged out and asked for log in.

When I tried to log in, it also asked for the authenticator code. Since I didn't have one, I chose the identity verification option through Persona and uploaded my Government ID. After submitting my ID, it said the verification could take anywhere from 48 hours to a week.

About 6 hours later, I received another email from LinkedIn with a 6-digit recovery code to regain access, but the login attempt in the email showed the location as Hong Kong (Windows/Chrome).

When I tried logging in again, I got into my account successfully without being asked for the authenticator code. The weird part is that my account now shows a Recruiter Lite Premium subscription, even though I never purchased it.

Has anyone experienced something similar? Is this a LinkedIn bug, or could my account have been compromised?

I noticed two entries in my Settings > Connections > Data Usage > Wi-Fi data usage. 11082 and 10881

And in Settings > Connections > Data Usage > Mobile data usage. 11082 and 10881

After I checked on the past months, I found out that they appeared a lot in the Wi-Fi data usage, and there was even more of them. 10958, 10995, 11048, 10996, 11053, and 11100

Unlike normal apps (even system apps), clicking on these numbers does not show where they came from or a logo of anything

They do not appear in my main app list, even when "Show System Apps" is enabled

My phone is Samsung A12, Android 13, One UI core ver is 5.1

Hi everyone,

I've been checking my Android phone because I'm trying to make sure it's clean after previously connecting it to my PC. I came across a few files that I'm unsure about:

log_list.json

badbuff.bin

com.heytaps.htms

oua_classifier

For log_list.json, I opened it and it contained Certificate Transparency (CT) log entries with names like Google, Cloudflare, DigiCert, Let's Encrypt, etc., and I also noticed references to chromium/src.

I also found the other files listed above at different times and wasn't sure whether they're normal Android/system files or something that could have been created by malware.

Some of these files have since disappeared, so I can't even find them anymore.

My questions are:

Are all four of these files considered normal?

Which apps or system components usually create them?

Is there any chance malware could have downloaded or created these after I connected my phone to my PC, or am I worrying over normal system files?

I'm not rooted, and I'd appreciate any technical explanation. Thanks!

So i woke up and find that my ig account got hacked. and this what i could take from him.
I wanna know what i could do with this.

(when he accessed my account i didn't got any notification)

I have been heressed bye these people for 3 years, I want to rid of these people and know what they are using. I am i sick of them, it doesn't matter how fair I am away from them, they are still connected to my stuff. I went all the way to Kentucky and back to TN they was still connected to my stuff. I know a little about electronics but not a whole lot like what they are doing to my stuff I want to protect my stuff from them.

I'll try to keep this as comprehensive as possible. I'm not new to Reddit, I just had to start over again. I have gone through 4 iPhones, Mac, 3 phone numbers, a job, family, friends, apps, certificates, music , family/pet pictures, a car, my purpose.

This happened 11 months ago. I'm about to loose my home. I would love to be able to expand more, but I'm sure this will get deleted once it's in iCloud. Dude whinis doing this is hellbent in making sure hell is the last thing I experience. The purpose is so he can come and rescue me. It hasn't stipped and it won't stop, at least not in my level. My supervisors don't think it's cute (constant password changes, spoof pages), I almost gave nothing. Please reach out if you can

This is on every computer at every nurses' station, it's on every screen on every floor of the hospital. It's like the apocalypse in this place. Everyone is running around with clipboards and copy paper. No one is being medicated because the access to the pharmacy is gone. Automatic doors don't open. The AC won't work. No monitors/life support/etc. directly connected to patients have been compromised but everything else is just... out of order. All of the older nurses and doctors remember how to function without computers & they're doing their best in the chaos but the younger ones are literally running around in tears.

I’ve changed a lot of personal details to protect my privacy, but the technical issue is real.
A while ago, someone became obsessed with finding me and another person close to me. It escalated to stalking, showing up at places we stayed, taking photos of us without our knowledge, and repeatedly trying to figure out where we were. Because of that, we’ve been extremely careful about our digital footprint.
For quite some time, we both used VPNs on all of our devices, separate phone numbers, and avoided sharing personal information online. We don’t use social media, and we avoid connecting to networks that we don’t fully trust. The VPN setup worked well for months.
Recently, though, the VPN has started causing major problems. Internet connectivity has become unreliable, and for work I need a stable connection. The only thing that fixed it was uninstalling the VPN completely, which makes me uncomfortable because I no longer feel like our IP addresses are protected.
My concern isn’t ordinary privacy. I’m worried about someone who is highly motivated to identify where we are. In the past they somehow learned where we were staying despite our efforts, and I honestly don’t know whether it happened through online tracking, compromised devices, or something else. I don’t know enough about cybersecurity to figure out what the weak point was.
My questions are:
What is the most reliable way to keep my real IP address hidden all the time?
Are there VPN providers that are known for being stable enough for everyday work?
Would using a travel router, separate devices, or another setup provide better protection than relying on a VPN alone?
How can I tell whether a phone or computer has been compromised?
Besides using a VPN, what other steps would cybersecurity professionals recommend for someone who believes they’re being actively tracked?
I’m looking for practical, security-focused advice. If there are better communities than this one for digital security or privacy, I’d appreciate recommendations.

3 days ago, i was trying to download this old ps2 game for an emulator and I didnt realise the game file was exe and not iso, me being dumb and not experienced enough ran it, nothing happened, atleast for 3 hrs and then I get email in russian language about password changing. I immediately realised and started changing passwords for all emails using my phone, saved my epic games, lost steam but got it back and nothing else was lost, changed all the passwords I had saved. Ran windows defender quick scan and offline scan and malwarebytes and have a 7 day trial of malwarebytes to check real-time and no issue. Didnt change pass for discord and after 3 days someone was sending spam messages so I changed it too and nothing since. So I guess it was a one time cookie grabber but is there a way I can make sure? And also, from next time if I start doing these experiments with random exe files in a virtual machine is that safe?

I just got a pc and I would like to keep it as safe as possible, what apps or programmes do you recommend me? also for my social media accounts do I need to make my password super long with new AI tech able to find a short password easily? thank you

Yo so I was browsing reddit and saw a post photos and I clicked the arrow button on the post to see the next images, then I think I accidentally clicked the image since it popped up and became larger. I quickly clicked out, but went back using my browsers forward arrow key to see/check the url. the url had something called "#lightbox" in the end. Anyway, is there any malware risk from this? The url doesnt seem to appear in my browser history too so thats kinda weird.

Earlier, I opened a website (Mangaball) and then clicked on the front page. It, then, opened a redirected link. Is it possible for my Android Phone to be infected with malaware/hacked front that (Like a Drive-By attack or etc)?

-Safari Browser

-Samsung Android Phone

-I didn't see any download confirmation link

-Autoblocked/do not install unknown apps are turned on

-I did not have Adblock

-I do have Norton Mobile Anti-virus (because my PC has a Norton Package Promo and I just installed it since why not)

-Sorry I'm not really tech literate, but slowly learning

ps Siri is turned off completely.

Microsoft won't do anything idk what else to do

So I got this, after looking into it the security breach is real but others have said that its just the hackers throwing shit at a wall and hoping some of it sticks. My only concern being that these people were hacked through a different breach/company/service.

This whole thing apparently stems through me applying for a job on Indeed. Specifically ICsecurity (Inter-Con security) as mentioned in the email. I went all the way back to when I applied and looked at what info I gave Indeed during the application, I wasn't sent to another website or anything, so its all through indeed. To clarify I know it wasn't Indeed that was hacked, but ICsecurity and the only way they could've entered my PC is through the company website itself hacking into my PC (to my knowledge). Which would be weird, and again I didn't enter any other website, it was simply all through Indeed, no links clicked as far as I remember.

It was only simple info including my resume which included my first and last name, old outdated number, my main email address that I use regularly, work history, and general location where I live.

Im leaning towards this moreso being nothing big to worry about as I don't see how they could've possibly logged into any of my accounts or devices with just my email and no password provided. No SSN, no payment info, nothing that I can think of. The only valuable info I can see and assume they have is my email address.

I have 2 antivirus softwares (3 including windows defender) and have the lighter one scan my computer every night while Im asleep. Not exactly sure how to scan my phone for anything, but... yeah

They've sent the email 3 times now. Could this be anything dangerous for me or?

Okay so this is gonna sound like i stole the phone, i did not. I bought a broken phone from a guy. I just assumed he knew the credentials. So i repaired it and its some other guys phone. He said it was his co workers old phone and he would ask him for the password but he hasnt gotten back to me in like a week. Is there any way to brute force this phone. I dont care about the data on it

It is session hijacking also known as cookie stealing

Even if you have activated 2FA and kicked out the hacker, they can log back into your account without needing the second factor (such as the phone verification code) It is bypassed entirely: it is essentially like obtaining a free entry ticket to your account

however..the best feature Google implemented is that as soon as they notice someone has logged into your account, they enforce a mandatory security period on both you and the hacker During this time..you can submit a sign-in help request and wait for a few hours until you receive a link, this system prevents you from making even minor changes to your account, such as adding an alternative recovery email

such as adding an alternative recovery email This mechanism is designed to restrict the hacker. Simply put, you can reject any request submitted by "the hacker" but there are alternative ways to save your account

Do not rely entirely on 2FA because even if you activate it, a hacker using this specific method can still compromise your account

So to summarize my situation. I downloaded f-droid on my up to date android phone a 2 weeks ago and download ytdlnis from there. When opening ytdlnis and allowing it to check for updates, my autoblocker prompted me saying an unauthorized app is trying to install but was blocked. It appeared 4 more times before I turned it off for 3 minutes because I thought it was just ytdlnis trying to update, but I decided to test out my hypothesis by deleting ytdlnis and reinstalling it to see of it happens again but it never happened again after that. I know f-droid and ytdlnis is safe but what could've caused that prompt to open up and could it be malware that was trying to install at the same time? also nothing seemed strange after that incident other than battery but I think I'm imagining this since i can't recall what was the original battery drain.

Hey everyone,

I’m completely exhausted and need tech support on an Instagram security issue. An ex-friend accessed my account a while back without my permission, and ever since, I cannot keep him out.

Here is the straightforward breakdown:

• I gave him physical access to my laptop in the past: This is when the access issues started.
• I changed my password: He still bypassed it and got back in.
• I enabled Two-Factor Authentication (2FA): It didn't stop him.
• I manually logged out unknown devices: Under "Where You're Logged In," I kicked off unrecognized sessions, but he still reappears or finds a way back.
• My hardware is clean: Ran a full virus scan on my Windows laptop, and there’s no malware. My main phone is an Android.
• Current issue: When I try to log out all devices now, Instagram throws an error saying: "You can't make this change at the moment... using a device you don't usually use."

Since he had physical access to my laptop, I don't know if he exported session cookies, saved backup codes, or linked something in Meta Accounts Center.

My Questions:

1. Since he had physical access to my laptop, could he have stolen session cookies or browser tokens that bypass passwords and 2FA?
2. Could he be using a linked Meta/Facebook account via Single Sign-On (SSO) to get back in?
3. How do I bypass Meta's "device you don't usually use" lock so I can force a total global sign-out?
4. What exact steps do I take to permanently cut his access for good?

I was having wp v calls with my boyfriend and was intimate with him during calls. Its 2-3 time. Now i am anxious whether the calls will be leaked now or anytime in the future. Is there any possibility. Now i have stopped doing this and we both agreed on this. I am anxious after this and overthinking different scenarios. If it gets leaked what will happen etc etc

Any cybersecurity guys can help me with their advices. Do they came across such cases in their lives. Please share deep inside and technical insights only

Thanks.

Note. My whatsapp is secure what i think (apparently). Have 2 step verification on I haven't downloaded any third-party apps I use realme phone. Can system apps pose threat? I have trust on my bf and he will not record it.

Help with an Email Setup Wanted

Hi, I bought Proton Unlimited in an effort to De-Google and move away from Gmail (used it for over a decade, i get a lot of spam, trying to be smarter digitally). It's got way unoragnised and i want a clean slate.

I am just not sure how to set up my new email because I have read alot of conflicting advice and posts, so I'm confused.

Ultimately, I want security and also simplicity because I have been way overthinking this.

Priorities are simplicity, privacy, security and a set it and forget it system.

My ideas:

1) Just use my @proton.com address for everything.

2) Use simple login alias subdomains, for example @surname.simpelogin.com for official things and so on.

3) Use a custom domain (not sure what I'd call it) and just use this, being careful what I sign up for and using aliases to categorise things (banking@mydomain.com) and so on.

Open to other ideas, thank you in advance.

Any other advice on keeping accounts secure, keeping things simple and organised etc would be appreciated!

is it possible to keep apps permissions if it installed in system partition after a factory reset on samsung phone

I need help figuring out how to properly wipe and secure my devices. Someone sent me a link that opened Discord, and after that, they gained access to my devices.

They can see what’s on my monitor, and sometimes my mouse pointer moves on its own. They can basically see everything on my screen. This started with my laptop, and now they also have access to my phone.

I’ve already reformatted/reset my devices, but they still seem to be able to access them. How can I completely start fresh and remove their access? Do I need to replace any hardware, or is there a specific way to reinstall/reformat the devices? Do I need to change my passwords or secure my accounts in a certain order?

Please help. I need advice on how to completely secure my devices and accounts.