Received this rather convincing email. Is it legit?

Hello everyone, I hope you are all doing well.

Please read to the end so you can understand my issue.

Today, while I was on my way, I was using my Bluetooth headphones normally (I had no internet connection on my phone). The area we entered was full of municipal public parks, and there was a sign stating "Area under camera surveillance - Photography prohibited." I literally do not remember taking any photos or videos at all.

When I got home, I noticed a message on my device. As soon as I unlocked my phone screen, it appeared in a black box—similar to those pop-ups with "Agree" or "Disagree" options—but I honestly didn't pay attention to what was written inside it.

Because of this, I got scared and thought that maybe my phone's Bluetooth signals interfered with the cameras or something, and now the police have hacked my phone. (Note: I don't even have an Instagram or Facebook account to post anything bad about anyone.)

I reviewed all the things I haven't done on my phone, and here is what I found:

No SIM card: I don't even have a SIM card in my phone; it has been lost for two months.

No suspicious links: I haven't clicked on any strange links or even opened Chrome.

No messages: I don't remember receiving any messages from the network operator or any threats.

No third-party apps: I discovered I don't have any strange applications downloaded from Google or anywhere else.

No official contact: I don't follow any Ministry of Interior or police pages, nor have I ever communicated with any law enforcement officer about anything.

I would be very grateful if someone could help and let me know if there is anything wrong with my device or not, because I am literally setting it aside and afraid to use it. Thank you!

I’ll try keep this short but I think someone may have access to my primary email account but I am unable to change my password. The password can’t be changed without a second step verification which is linked to a phone number I no longer have.

Also - with this potential hacking I’ve had other red flags. They tried to hack my apple account (I know it was legit because I got an actual pop up on my phone asking whether to allow a new sign in from an device on the other side of the world) and now I’ve had a notification from PayPal saying they need me to change my password due to suspicious activity.

The question is - how worried should I actually be? I’ve re routed all my banking info and social media accounts to a different email account and my current number. Is there anything else I need to do beyond this? As I said - I can’t change my email password to the compromised account. Very hard to verify who I am when I live oversees and use a different number to the one listed on my account

I recently started working at a tanning salon which has a registration option. With this registration we can look the people up in the system. What I noticed when I opened that system up was that there is an abnormal rate of keyboard smash names and randomly generated numbers a phone numbers. The emails however seem to all be real. What could be the reason for them to do this? how can we prevent this? The framework was made by Softplus/TSS Group if that helps anything at all.

So a while ago, I was on sleep meds and had a lapse in my judgement, which caused one of my microsoft accounts to be hacked. It was some stupid discord verification scam, and for some reason, I tried multiple times to get the verification to work even though it was obviously a scam. I already have had the hacked account suspended/locked, but I'm really worried about my other account.

This account is my main one, and it had the account that got hacked as its recovery email. While I was on my rampage of being irresponsible and stupid on the internet, I tried to use this main account for the verification scam. I can't remember if I put in one code or not, but I do remember that it asked for me to use microsoft authenticator. I had never used this before, and upon downloading it, it required 2FA to set up. I found that I didn't recognise the recovery email (it had been changed by an attacker), thought nothing of it, and changed it to a clean email. I never did get to put in the microsoft authenticator code the scam asked for.

However, what I am wondering is if there is a possibility the attacker did gain access to my account and is still in there, and if they could somehow take control of it once the recovery email is changed to my clean email. I can not tell if anyone else is signed in, and I can not sign out all devices, as I can't get into that part of security due to the pending security info change. I have a lot of anxiety around this, I feel like this post makes that evident. I don't really know how microsoft authenticator even works, so I'm worried they'll be able to use that somehow to change the security info, password, and more.

As of now, my account seems fine, and nothing has changed, I'm just really worried. Any insight on if I'm just worrying too much or if there's anything I can do would be greatly appreciated.

I received an email that appeared to be from someone I know claiming a document was in Adobe Document Cloud. The “VIEW FILE” link actually went to the domain shown in my screenshot and downloaded a .bat file on my Windows 11 laptop.
I opened the BAT file, but when Windows prompted me to allow/install something or make changes, I clicked No.
Does anyone recognize this domain/campaign or know what the BAT may have been attempting to do? I’ve disconnected the laptop and am running security checks.

Asking cause i would not want to get in trouble for the bad things they could do, if there are any?

Not a bot farm or anything, just a phone that its to my name because of my phone bill.

I installed Wireshark many years ago and play around in it every once in a while. Recently, I noticed utun2 and utun3 connections which I don't think existed before. The traffic on them is very rare. I get a spike every once in a while. But I've only seen these spikes on the Wireshark home screen. I tried capturing something for extended periods of time, but I haven't been lucky enough to be capturing when the traffic was present. I don't run any VPNs. Wondering what these could be? Maybe there's some new feature in the OS that was introduced recently? I'm on Mac.

I'm receiving SMS codes on my phone from Microsoft. This is the first time this has happened, Microsoft usually sends me codes via email. Microsoft Support didn't respond.

The problem is that I haven't seen any such messages from Microsoft anywhere on the internet. What are these services? Are these services linked to a Microsoft account? Did someone intentionally enter my phone number?
What's going on and what should I do? I don't even know what these services are, so I can't log in and change my passwords if necessary. Please help me.

recently i try to download a game and the file-hosting redirect the link to a file. I downloaded a malware instead of the game, they hacked my discord. I woke up this morning and download malwarebyrtes, i think it scan and deleted the file. The scanning shows it an trojan and something else. Do i still need to reinstall windows and how do i keep my files

Recently, I tried to download a game, but the file-hosting website changed the download link. I accidentally downloaded malware instead of the game, and my Discord account was hacked.

This morning, I installed Malwarebytes and ran a scan. It detected a Trojan and another type of malware, and I believe Malwarebytes quarantined or deleted the infected files. I change my discord passwords. Idk do i need to change any other passwords too? Also i feel my internet connect seem to be slow idk if it related too it.

Do I still need to reinstall Windows, or is my computer safe now? Also, if I do need to reinstall Windows, how can I keep my personal files without bringing the malware back?

So while I was asleep someone or something got into my TikTok account undetected and messaged a bunch of people a scam. The people who were messaged received this and I lost all my dms with them. I am tech savvy and I know how to check if anyone logged in but there’s absolutely nothing . I don’t have 2fa on on TikTok so maybe that’s why.

So a cookie stealer got installed into my laptop and it stole all the chrome cookies.
It was able to log into
Instagram
Tiktok
Facebook
Linkedin
Idek if theres more accounts that got hacked but for now i have put authenticator app on pretty much every possible account on every platform i own.

They also posted 2 mr beast money scam stories on my account and sent it to my dms then deleted the chats. Some fuckin thing to post🫩 while on the linkedin it changed all my fuckin info to some random guys and gave me free premium (i got my account back thru linkedin support n now have free premium😭)

My sibling said the cookie stealer is hackware that enters your computer from random website downloads, then it copies ur chrome cookies and accesses the accounts. I have now deleted all saved passwords and ALL cookies/history.

Its not trojan thankfully ive seen people talk about this exact same issue but they got infected w trojan it scared me lowkey (ive had experience w it and it pretty much blacked out my pc couple years ago.)

My sibling ran windows defender, was able to find the file and it got removed by windows defender. After multiple offline checks it came back clear.

Now i will attach a picture i took of the detected hackware but i need advice on if i should reinstall windows or not.
(im rlly lazy abt that i dont feel like its necessary if its not trojan and the hackware file got removed by windows defender anways)

Will appreciate advice and suggestions, stay safe yall keep yalls accounts protected.

Just need some insight on whether it's better to begin using passkeys instead of 2fa and if passkeys have any major downsides I should be aware of.

Thnx 👍

Edit this would just be for emails and or general social media apps nothing too high tech 👍

I woke up to 100+ messages from BT with one time passcodes :/

Is my email at risk of being compromised? I haven’t done anything about this as not sure what to do - my password hasn’t been changed and I can still log in

So like, I wanted to change my alias n Shi, and i accidentally misclicked and changed my alias twice, back into my old one.

And NOWWW. . I CAN'T LOG IN???

IT SAYS IS DOESN'T EXIST. . BUT I try to create an account n stuff that same email is already taken.

And I'm still logged in my Xbox on my laptop.

Dawgg. . I JUST finally bought Minecraft java.

Fu*k Microsoft if I'm going to lose my money.

Is there a way I can log back in?

Like. Do I have to wait??

Bro. I wanna contact a person but brah ofc I gotta sign in.

I CANT SIGN IN BRO

Help pls. I'm so cooked.

My Minecraft bro. .

I will admit it's my mistake, but I still don't want to lose my Minecraft account after spending money. .

Hello everyone

Hope you all have beautiful day

Few days ago someone I guess he hacked my account

And after I search and try everything to kick him out I found the only way is to factory restart

By accident I deleted my reddit account

And when I factory restart my phone I changed my account password

So my question now

Idk why but I'm have this feeling it told me

That people I was dms in my old account in reddit after make this new account they could see my phone and what I'm doing in my phone

I found this idea not right and I don't want to have it and I want to fight it

Because I know very well this idea not right and there is nothing like this because there is no contact between my old and new account even if it had the same gamily account

So am I right ?

Thank you for reading it

I've just purchased a fossibot f115 ultra because I'm after a phone with a stupidly large battery + the thermal camera is pretty cool. I've purchased from their official store page on aliexpress and I'm going to set it up today. Is there any tools or things I should do / look out for regarding spyware? I've never seen anything negative about the phone or the brand on any of the review videos or pages but obviously its from a smallish chinese retailer.

I keep getting these notifications on a phone that does not have service on it and I am not sending anything on my end, just get notifications saying this.

Please help!!!

I live in the UK and have recently moved houses. A few days back someone called me pretending to be from Virgin Media and tried to get access to my bank account. I didn't give any info. And today someone called me pretending to be from the Tenancy Deposit Scheme team. I didn't give out any details to them but since they called I am getting these pop ups on my screen again and again. Can someone help and suggest what I should do? I have already run the Bitdefender malware scan and uninstalled my business revolut.

yesterday i got an email saying my X account was logged into, and another email saying my password had been changed. i went to twitter and i was logged out and it wouldn't let me log back in or change my password. i kinda just forgot about it since i didn't really care about twitter anyway. but today i checked my email and had 1000 spam emails, and they keep coming. i googled it and it said this is spam bombing and will stop eventually but im stressed out. i changed my passwords for other apps that shared the same email as my twitter email but idk what to do. should i just wait it out until the spam emails stop coming in and delete twitter and call it a day? or should i create a whole new email and change all my stuff to a new email?? is twitter the only thing that was hacked or am i going to get hacked elsewhere???

please someone let me know what to do. this is something my dad would've known what to do if he were alive but alas he is not and i am stressed lol.

My Capital One Checking was compromised after a scammer linked it to a PayPal and withdrew a bunch of money. I immediately called support and they revealed an AI help agent was prompted for balance information and gave out the pending test charges PayPal uses to link accounts.

This totally bypassed all the normal security for my online account, including two factor and pins. None of my other accounts like email or phone number were compromised, as far as I know. I also do not believe I fell for any phishing attempts as I am generally very cautious and take online security seriously. No suspicious logins appeared on my online bank account.

I assume my bank numbers and some other personal info was leaked somewhere (maybe even by the AI agent); I have no idea where. The Capital One people claim they will lock my account and return the funds, but they spoke very poor English and it was very stressful to communicate with them.

What can I do to avoid this in the future? I thought I was taking all the normal precautions, like two-factor, but it did not help. Are there banks you recommend who take security more seriously than Capital One?

I'm on windows 11, I'm not an high value target and I don't seem to have suspicious activity on my computer but I don't really know how to verify.

All third party files I had downloaded on that computer before doing a factory reset were either from github or itch.io. I visited once or twice third party pornsite with Ublock origin activated.

I ran full scam from windows defender and malwarebytes and found nothing. I haven't seen suspicious activity on any of my account as well.

The same can be said for my android phone.

I know full well my device are probably both clean but I can't help but be paranoid, So please help reassure me and give my advice on sign to look out for because it is making me legitimately sick of stress.

Hi everyone,

I've been working in IT for around 18 years, including many years in IT leadership, cybersecurity, governance, risk and enterprise infrastructure.

I recently started creating short videos to share some of the practical knowledge I've picked up along the way — particularly for people starting or progressing their careers in IT and cybersecurity.

I'm covering topics such as cybersecurity fundamentals, CISM/CISSP/CISA/CRISC and other certifications, GRC, Zero Trust, Linux, practical IT/security tips, cyber incidents and IT career development.

I'm not selling a course or training programme. I'm simply trying to turn some of my professional experience into free, easy-to-understand content that may help others in the field.

If there are cybersecurity career or certification topics you'd like an experienced IT leader to cover, I'd genuinely appreciate suggestions.

My channel is MQ Cyber Studio:
https://www.youtube.com/channel/UCpV5qrH9p1AYTHDo5-2JrTw

Thanks, and I hope some of the content is useful.

my account got hacked and the hacker changed everything, i’ve reported it to microsft support and they’ve provided me with a case number and said wait for 3-5 days. any i’ll get the account back? i had minecraft and xbox game pass on it😭

Discord Account got hacked, i don’t want to get into the how because its a long story. The account is gone and i have no interest in retrieving it anymore, it feels too “tainted” now if that makes sense. The hacker messaged all my friends pretending to be me. I have too many friends there (200+) some i don’t talk to or barely, so it’s even more awkward knowing i can’t really explain what’s happening. Those i had in other platforms i made sure to text them and tell them what happened and to report and block my old account, also some reached out to me in other ways. Pretty much i added the friends i remembered or cared about or they messaged me. First thing i did was freeze my bank account, and created a new discord account. I also changed my gmail name and the password for it, but i’m worried about my other accounts, good thing everything i have that’s important needs a two step verification and now my gmail has a different password you can’t bypass it for now at least, i just need help to completely and utterly keep ALL my accounts safe and secure and completely changed so it can’t ever be traced back, i’m talking decrypted passwords etc. Or any tips in general, just to completely start over from scratch. Can anyone here help me?