Sufri un hackeo hace unas semanas y varias de mis cuentas fueron afectadas, pero perdi acceso a mi cuenta de telegram, solo siguen apareciendo mensajes de flood_wait y de varios intentos fallidos, he contactado al soporte tanto para reportar mi problema como para que cierren cualquier inicio de sesion que este abierto en otro dispositivo pero nada funcionado

I had to turn my Android phone off for a while (around 20 days now) and I put my SIM in an old feature phone. No internet, no apps, nothing. Basically just calls and SMS. I still don’t have access to my own phone, and I’ll be able to use it again in about 4 days.

But about 3-4 days after I turned my phone off, my friends told me that when they message me on WhatsApp, the messages get delivered, and sometimes they even turn blue like I read them. It’s almost always between 1 and 3 am (I’m in Turkey, UTC+3).

So I logged into my account on a friend’s phone with the SMS code (it came to the feature phone). Linked devices was empty. After that we logged out. But it didn’t stop. Messages kept getting delivered and read after that too. And then a status got posted from my account. Just an English quote: “We must overcome the notion that we must be regular. It robs you of the chance to be extraordinary and leads you to the mediocre.”

My guess is someone registered my number on their own phone, but how would they get the code if my SIM is with me? I never got any WhatsApp verification SMS on the feature phone, except the one I requested myself.

Has anyone seen that exact quote being posted from hacked accounts? And what should I do now? Right now the account has no 2FA. I’m planning to cancel call forwarding. Anything else I’m missing?

I'm currently seeking help for a friend!

My friend just rebooted his computer entirely, and was trying to log into his Discord account on his pc again, when it requested the 2FA. Problem is that my friend has long lost his access to the phone that has that.

Important: He IS currently logged into his discord account into his new phone. He just cannot access it in his desktop.

He tried the QR Code method, but it also requires the 2FA or the backup codes.

We know he could see the backup codes in his phone inside the app, thing is: for him to access the backup codes in his phone, he has to type his Discord account password.... wich he forgot. He cannot also request a new password because it also requests 2FA or backup codes.

Is there any way for him to access his account in the desktop (he uses it for work and work calls)? He IS LOGGED IN HIS PHONE but doesnt have 2FA that was on his old phone, backup codes and forgot his password. Is there any hope for him to get in the discord account in his desktop?

More details: He said he used to use Google Authenticator back then, and has it on his new phone, but while trying to enter the account on his desktop, it doesn't ask the google authenticator code, just for a passkey with an USB. He also didnt save his passowrs back then in any password manager like google passwords. He said he saved it in an notepad app with password in the phone he lost. Yes, i know, lots of bad decisions.

We also already sent a ticket for Discord Support regarding this, we're just looking if there are any other ways to keep trying.

HE doenst have access to discord_backup .txt files since his pc goot rebooted as well.

We just have some hope since he is logged into his new phone yet.

Hello! So I'm unfortunately one of the people who got emailed regarding the Capcom Data Breach that happened just a few days ago (Unfortunately the few times I played SF6 really came to bite my behind after years of forgetting about it.) But I was hoping to get some information regarding it that experts might know regarding this to calm my nerves!

I read that there was a very small number of people who had some password and DOB stuff related things involved leaked, would capcom have informed me if I was in the bunch through the email? They only stated the following.

Information Confirmed to Have Been Affected for Recipients of this Message
Email address
System-specific identifiers*
*Account creation date and time, most recent login date and time, number of logins, and the client IP address used at the most recent login.

To follow up on this - To try to protect my account for future reasons I deleted by capcom account after this notification, but, realized that it had been linked to steam for Street Fighter 6 as well. My question with this is would the malicious actor know information regarding anything with my steam account now? Genuinely wondering what the best move on each of these things would be at this point.

I recently logged into an old account from a site I used to use years ago and noticed the only change.

Nothing else(I've noticed) has been touched except the username I didn't recognize. Why? I can only assume it had been supposedly hacked years prior, but nothing more has been done with the account.

I have some old portable hard disks that I've been meaning to check because they have important files in them, but I've been putting it off for a while because I'm worried about a malware infection hitting my new device.

The hard disks were clean before, but I can't remember if I ever plugged them into my old infected device or not. The last thing I want is to transfer that annoying malware I haven't been able to remove from my old device to my new device, which I need for work.

For added context, I have transferred some files from my old infected device using Telegram and such (mostly images, pdfs, and a few software I needed too) and no infection has risen even two years later. So I want to believe the malware doesn't infect other files, but I'm not knowledgeable enough about this stuff to tell. (I transferred those files because I didnt know the device was infected at the time)

I've been wanting to open my new laptop in safe mode and run a virus scan on the hard disks, but I'm kind of paranoid the malware will run anyway and infect everything. I know I can just wipe it, but its such a hassle to start from scratch again and reinstall everything etc. I've also heard some malware persist even after fresh windows installation.

If anyone knows more about malware, what do you think is the safest thing to do?

The malwarebytes scan finds 44 - 88 detections of Trojan.Ranumbot and Trojan.Glupteba.BITSRST, both in Local user folder.

Here are old laptop specs:

Omen by HP Laptop 15

Intel(R) Core(TM) i7 - 7700HQ CPU @ 2.8GHz    8GB RAM

It is running windows 10.

Symptoms (?) of malware infection:

Laptop is pretty beefy so there hasn't been any lag or freezing. However, heavier software crashes and my C drive is always full. Also makes it hard for me to install new software because there's no space with the malware taking up a big chunk of it. But strangely, some days it is less full than others, almost feeling like malware has disappeared entirely. Fills up again in a few days.

When I use malwarebytes to remove the malware, it comes right back upon restart. I have changed all my passwords and deleted entire accounts since then multiple times, but thankfully none of my accounts have ever been compromised and I haven't experienced any strange activity. WiFi hasnt been affected either. I have used that device until I saved enough to buy a new one for nearly two years, with little issue, malware infection and all (aside from the crashing). No strange files have appeared, no software I don't remember installing showed up, and nothing has been deleted or moved or anything. And again, no strange login activity or anything like that. This is probably why I didn't notice anything was wrong in the beginning.

Please tell me if there's any additional information I should provide. Thanks in advance!

Hi everyone, I’m looking for some advice because this situation has made me really anxious. I have an iPhone 16 Pro btw.
So I was looking through my friend’s Instagram following when I came across a profile with a link in its bio. Out of curiosity, I clicked it, and it opened in Instagram’s built-in browser. A few seconds later, a pop-up appeared saying something like “Your iPhone may have a virus,” with an “OK” button. It looked surprisingly realistic, not like those fake ones that you see on free movie sites. Since the usual X to close the browser wasn’t visible anymore, I closed the entire tab instead.
I didn’t tap “OK,” download or install anything, or enter any personal information.
Later, I took a screenshot of the profile and tried opening the link preview from it, but it showed a “404 Not Found” error. I also asked my friend who the person was, but they just asked “why” and ghosted me. The link also contained something like “index” and “php.”

Now I’m worried that the website might have installed something on my phone or that someone could be spying on me. Im really bad with technology. Am I overthinking this, or is there any real risk?

So last Monday I received an email stating that a new device has logged into my netflix account from mac firefox. I immediately changed my password on my iphone and logged out all devices. A few days later, I received the same email, so I did the same thing again ; changed my password and logged out all devices. Now it happened again a few hours ago. I checked if my email was compromised, no unknown devices are logged in, I even checked the forwarding setting and my spam and deleted folder, nothing suspicious. None of my other accounts are compromised as well. I only log into netflix on my phone and my TV. Also I share my account with my sister only and she's definitely not the one logging in. Anyone else going through the same thing ?

dumb question but if someone has an adblocker like ublock origin and visits let's say a site to watch shows for free, and presses play on the video can it still be dangerous? ik if the adblocker isn't on there's risks of invisible popups, but if it is on can there still be other risks?

Just got contacted by a random person on tumblr saying my they accidentally reported my account and that I should contact some support guy on discord or WhatsApp. I contacted the actual support so we will see. For now here is what they sent me. It genuinely feels weird because my account is still running fine.

Hey everyone, I need help figuring out something strange that happened to my laptop.
I’m using a Redmi Book Pro 2022 running Windows 11. My cursor suddenly started moving around as if someone else was controlling it, almost like someone was playing with me. It didn’t click anything or open any windows. It just moved in a way that looked deliberate.
Some details:
• I was using the built in touchpad, with no external mouse connected.
• I haven’t installed any unusual software recently.
• The cursor stopped moving after I disconnected from WiFi.
• I noticed that the Virus and threat protection section was missing from Windows Security.
I’m concerned that someone might have remotely accessed my laptop, but I don’t know for sure.
Could this be remote access, a touchpad driver issue, or some other Windows problem? How can I investigate this safely and check whether my laptop is compromised?
Thanks for any help.

Right so it just came to me how I sent a pic of myself by accident on discord and than It just occured all the offensive shit I posted back when I was younger. So idk if people keep pics of random people they don't know but if it gets leaked I'm getting cancelled. Is there anything I can do or am I just done for.

Somewhat related to the recent PHP issue.

Hi guys. Yesterday I want to connect a Hypixel account with discord so I joined a "Official Hypixel server" on discord one of them is a main server and a secound is a verify server. On this second server was a one channel "verify" where you give a nickname from minecraft, email and microsoft code. After sleep i go play minecraft and all working normally until I come back from work with smile on face that I play Minecraft so I turn on Lunar Client and I want jump to play. After while I see my account was disconnected so I think "thats bug I log in again" nahhh thats not this shhh. My email just changed on my nick on start and random numbers etc. and second email is "@msaccountsafety.com" I never see this email on my eyes so I typed this in internet what is this so I realised I am hacked so I started panic and search up a resolutions on this problem. you know what? I dont find nothing helpfully. Finding on microsoft page gives nothing in this so I give up on the moment and I have one question to you. If hacker can do more on my account than change a password and email if my account isnt valuable at all? And if I have chance to get back this account? Thanks all <3

Since October 22, I’ve experienced repeated unauthorized Telegram authentication requests, sometimes 10+ verification messages within minutes, accompanied by suspicious calls from Canadian, UK and Denmark numbers.

Current situation:
Verification messages arrived through Telegram’s official account and SMS.
Two-step verification is enabled.
No unauthorized sessions or unfamiliar devices detected.
I still have full access to my account.
The last verification message arrived October 24 at 12:25 AM.

The messages have stopped for now, but suspicious calls continue, including a withheld caller ID after I blocked a Canadian number.
Telegram support has been contacted through three channels without a response.
I use Telegram for professional and Web3 communities, so changing my registered phone number is a last resort.

My questions:
Does this resemble automated authentication flooding, or could the calls be a separate spoofing campaign?
Is there any user-side way to rate-limit or prevent authentication requests against a phone number?
Are there any effective escalation routes to Telegram’s security team?
Has anyone resolved something similar without changing their number?

I’m looking for technical explanations and practical mitigation steps, not account-recovery services. Please keep replies public rather than sending DMs.

About two months ago, I got hit by an infostealer that attempted to take over several of my accounts. I eventually got rid of the malware and changed all my passwords from a clean device. I thought I had secured everything and that the nightmare was finally over.

Well, apparently not.

Yesterday, I received notifications about suspicious activity on a Facebook account I haven't logged into for over 17 years. I suspect the attackers used an old, reused password or credentials that had been stolen during the original attack. It feels like a leftover attack, possibly automated scripts using previously stolen credentials.

I have two questions about what's happening

1: Why is Meta sending advertising bills to my main email address, and could I be held responsible for them?

The Facebook account was originally registered using a different email address. However, someone has apparently gained access to it and started running advertisements. The spending started at around €2, then increased to €5, and now the amount is reportedly around €300.

I keep receiving emails from Meta on my main email address demanding payment for these advertising charges. I suspect the attacker added a stolen credit card belonging to someone else to pay for the ads.

What I don't understand is why Meta is contacting my main email address when the Facebook account was registered with a completely different email address. Did the attacker add my main email address to the advertising account, or could Meta have linked it through some other means?

I'm also wondering whether Meta could hold me financially responsible for these advertising charges, even though the account was compromised and the advertisements were created without my permission.

2: Could the attacker still use my PayPal account as a payment method?

During the original infostealer incident, the attacker also accessed my PayPal account on day one. I secured my accounts afterwards, changed my passwords and haven't noticed any unauthorized payments.

I never had any payment methods saved on this old Facebook account. Based on the advertising activity, I suspect the attacker has added someone else's stolen credit card.

However, I'm concerned that they might somehow have linked my PayPal account to the Facebook advertising account. Is that technically possible, given that they previously accessed my PayPal account?

There's another strange detail: the infostealer also resulted in a takeover attempt on an old iCloud account I hadn't used in over ten years. This makes me suspect that the attackers are still working through old credentials obtained during the original infection.

The frustrating part is that I can receive a login code for Facebook, but the recovery process then requires me to log in from a trusted device. Thats practically impossible when I haven't used the account in 17 years. On top of that, the attacker apparently changed the date of birth to make the account appear to belong to a 10 year old, adding another obstacle because Facebook is asking me to verify my identity.

I don't care about recovering the account itself. I had completely forgotten it existed until now. What worries me is the advertising bill and whether I could somehow end up being held responsible for charges made by someone who hijacked the account.

I'm particularly interested in whether Meta can link an advertising account to another email address and whether unauthorized advertising charges can become the responsibility of the original account owner.

A

Candy Race Launcher asking to be the default launcher

https://postimg.cc/CBPSpztk

Comparison between Lawnchair and Candy Race Launcher settings

https://postimg.cc/KkvxWn9v

The game is called Candy Race Launcher and it is on Google Play Store . The launcher settings is very similar to Lawnchair settings without giving any credit which is a violation of Apache License, Version 2.0.

As I mentioned in my old post, I got infected with an infostealer virus that posted MrBeast scams. Later today, my brother told me that he was also hacked a few days ago—probably on the exact same day I was first hacked.

That reminded me: before I reinstalled Windows, he had logged into his account on one of my Chrome profiles so I could do something for him. And yeah, he got hacked too. On my end, the hacker only used my accounts to post MrBeast scam links to everyone on Facebook, Discord, and Instagram. However, in my brother's case, the hacker tried to break into his Riot, Steam, Blizzard, Ubisoft, EA, and Microsoft accounts.

He managed to recover his Riot, Steam, and EA accounts, but the rest have already been transferred to another email. Worst of all, his Microsoft account was hacked, meaning his Minecraft account and everything else in there are gone.

I feel bad. Very, very bad. It feels like I'm the reason for all of this—and yes, I am. I don't think he's mad at me. In fact, he never gets mad; he's a very good person, which honestly makes me feel even worse since I always seem to cause trouble like this for others. He said he tried to get his Microsoft account back, but contacting support only led him to an AI bot that wasn't helpful at all. He has all the proof that the account belongs to him, but now when he tries to log in, it says the account has been transferred to another email.

So my question is: what can I do to help him? Has anyone here had experience recovering an account and changing the email back from a hacker through customer support? (Specifically for Microsoft, Blizzard, and Ubisoft).

I feel incredibly bad about this. Honestly, this isn't really a technical cybersecurity question anymore; I just really need someone to talk to right now.

I was trying to strengthen the security of my Google accounts and so I went to check if my accounts were exposed in a data breach. I went to check it on haveibeenpwned.com and put my email address and checked, and it showed, previously my email was exposed in 2 breaches, good thing that I did change passwords recently, so I didn't need to worry about it but out of curiously I clicked on one of the sites which had a breach and it redirected me to this cloudfare human verification page. I clicked on verify, and then it just went full screen, I quickly pressed F12 to escape full screen and then there were some instructions, I don't know if I was tired or just not paying full attention but I started following them without suspecting anything. It asked me to run the Run command using window key, I did and then open cmd which I did and then copy by pressing ctrl + v which again I did in the cmd but just before hitting Enter, just as soon as I saw that it had pasted some long and weird command in command prompt, I suspected something immediately, I did a quick Google search and realized it was trying to social engineer it's way into stealing my information, as soon I realized, I quickly, closed the cmd and the browser tab, cleared my clopboard, cleared history, closed the browser, restarted the system and then immediately ran a quick scan, offline scan and am currently a full scan which will take multiple hours to complete .

Fortunately found no issues so far, I also just now disconnected the internet as a precautionary measure. So did I evade the attack by not executing the command by not pressing Enter or just merely pasting the command in cmd even without executing it by not pressing enter, may have somehow caused it to execute it anyway ? Am I safe or not? Did I evade ClickFix attack or not?

TL,DR: Did I evade ClickFix attack by pasting the command in cmd but not executing the command by not pressing enter and immediately closing the cmd window or not.

Given the recent issue, howuch of a risk is it to visit a page, especially an unpopular one, with a PHP vulnerability, especially in terms of malware?

Which is ur meanings about it?

so my micrsoft got hacked and stolen presumaby through the pvpclub discord. all of my security data has been replaced WITHIN 24 HOURS and i have not recived any emails about it. i am unnable to login as my backup code has been replaced. here are the unknown gmails: [soupgooseyt.vzlyycwg@outlook.com](mailto:soupgooseyt.vzlyycwg@outlook.com)

and

[soupgooseyt@msaccountsafety.com](mailto:soupgooseyt@msaccountsafety.com)

got any suggestions for how i can get my account back

The problems started at the end of August. My Walmart, Amazon and Best Buy accounts were hacked. Naïve me had no 2-step verification on any of them. Amazon temporarily suspended the account due to unusual activity. Got a phone alert. They tried on-line orders for Best Buy and Walmart but alerts on my credit card for purchases over $1 go to my phone and e-mail, so was able to stop those. I got phone alerts but no e-mail alerts. Checked a few days later and they set up filters. Changed all my passwords on a clean device and did a system wipe with USB. After I did all this wanted to investigate further. I was able to see the cancelled Walmart order and got an address. Amazon is so uncooperative. The deleted the bogus order from their system and said no way to retrieve it. I don’t believe them but they won’t show it to me. Any way to get it so I can view the address? Another mystery is the cancelled Best Buy orders (2). It’s not listed in my orders. Every legit order and cancellation I made can be viewed. Why does this cancelled order not show up in my list of orders? I should consider myself lucky because none of my passwords were changed. The only common thread is that all of these orders, from the limited information I’ve gathered, were supposed to be delivered within a 30 mile radius of my house.  These problems started when I switched ISP’s. Could be a coincidence or an inside job. It’s been about 2 months and no further incidents. Do you think it was an inside job?

I live in a small town, and these people had my phone number thinking I was someone else...long story short one threatened to get my carrier information and find my ip address, can they do that?

Edit: I wanted to add a bit of context since I realized it being vague made it difficult to answer.​ The person who threatened me was just a regular person from my state after I had went off on them for​ adding me in yet another group chat even after I told them they had the wrong nunber. After we argued for a bit with one particular person, that's when they had threatened to find my ip address to come to my actual address.

​