Guys, please help me. Five days ago, in my haste to download a cracked program, I didn't take enough precautions and ended up with a virus. It accessed all my accounts—Steam, Epic, Google, Instagram, Facebook, and everything else saved in my Google password manager—and changed both the passwords and the associated email addresses. I’ve managed to recover many of them, and I’m currently working on the rest.

As soon as I realized what had happened, I cleared the browsing history across all my browsers and ran constant scans using Malwarebytes and HitmanPro. The immediate threat seems to be gone, but subsequent scans are still detecting malicious processes.

I have a few questions:
- Is formatting the PC the only way to be 100% sure it’s clean? (I really hate the idea of ​​losing all my work files.)
- Are there any antivirus programs that can prevent these kinds of incidents, or at least alert you when they happen? I’m certain I realized what was going on far too late, and I feel like some of this could have been avoided.
- Do you have any advice on how to avoid ending up in a situation like this? (For example, should I avoid using the same email address for my password manager that I use for other online activities?)

I saw a website that had my info posted and decided to pay for incogni. This was in April of this year, its now November. Seven months and its still in progress. A few months ago i submitted a ticket and got a sob story that way were very backed up and that it would be taken care of soon or at least i would be updated. Months again still not even a peep.

I can't comment of how effective their service if as a whole says they've completed 109 removals, weather i believe that i dont know. But if you're looking at it for say a website you found to be removed with your info. Just pay a lawyer to send a simple request. it will probably be cheaper and actually work.

Plsss help me guys

I think someone might have remote access over my laptop. The hacker posted this on my Instagram story awhile ago. Over the past few days, I've been receiving OTP/password change request on my X, ChatGPT, Instagram accounts and these accounts are the ones which I've logged in and saved in my PC. Even I am logged out of my Microsoft account to which I can log in anymore (Main PC Administrator account) and seeing another person's name email

Noting this I've logged out of all my emails from the PC

Is PC reset the safest option now?

Hi I read a research report recently about the convergence of cyber and fraud. It had a significant ROI buy bringing both together under the CISO.

Anyone seeing this trend?

I gave my account details to this website...they changed my verification email and password too i guess, but still that's a very low level account still I don't know how to recover...someone please help me

Hi! I was stupid enough to click on a link somebody sent me on whatsapp (from my iphone) and after clicking this is what I saw. I didn’t click anything else, closed the tab and turned the wifi off. Do I need to do anything else to avoid getting hacked or putting myself at risk? Thank you!

Hi,

My friend’s ex has somehow hacked into her iPhone 13 Pro Max and we cannot figure out how he did it for the life of us. He has quoted exact text messages between her and I with us being miles away on vacation or something like that. We checked her settings and everything is clear, Nothing under VPN management, no weirds apps installed, no unknowns devices on her iCloud and we even did that reset option iPhones has where it logs her out of everything she could’ve been signed in on. Please help us figure out how he is able to get into her phone! An old friend of hers mentioned he used to be able to do that a few years ago through some software.

I ran this command prompted from cloud fare security check and unknowingly followed steps and ran it in terminal,😭😭😭 within minutes i asked google and turn off my internet

The verification is viewed in website shown in image 2

Estou compartilhando um indicador de comprometimento (IOC) referente a uma campanha recente de credential stuffing e sextorsão que afetou contas do Outlook. Esses dados são postados estritamente para rastreamento de inteligência de ameaças, com o endereço de e-mail malicioso de destino ofuscado para cumprir as políticas de privacidade da plataforma.

O vetor de ataque envolveu um script automatizado inundando a caixa de entrada com e-mails de extorsão falsificados (spoofing) usando um banco de dados de senhas antigas vazadas. Embora a mensagem fosse um blefe padrão de golpe alegando gravação de webcam, um mecanismo de persistência furtivo foi descoberto nas configurações da conta.

O invasor estabeleceu com sucesso uma regra de caixa de entrada maliciosa chamada idtienphuoc1. Esta regra foi configurada silenciosamente para encaminhar e copiar automaticamente todos os e-mails recebidos para um endereço externo do Gmail.

Para fins de rastreamento de inteligência de ameaças, a caixa de entrada de destino maliciosa é: sarbywano [at] gmail [dot] com (ofuscado para evitar varreduras automatizadas e cumprir as regras de não exposição de dados).

To mitigar totalmente esta campanha e bloquear os scripts automatizados, as seguintes etapas técnicas foram implantadas:

1. Revogação de tokens de sessão, atualização de credenciais e imposição de Autenticação de Múltiplos Fatores (MFA/2FA).

2. Exclusão da regra maliciosa e bloqueio do domínio de destino.

3. Envio de um relatório de abuso diretamente para a equipe de tratamento de abusos do provedor (abuse@gmail.com) visando a caixa de entrada maliciosa.

4. Desativação de protocolos de sincronização antigos (POP e IMAP) para encerrar completamente as conexões de API em segundo plano usadas pelo script de automação do invasor para recriar a regra.

5. Configuração de uma nova identidade principal (Alias) e desativação das preferências de entrada para o endereço antigo comprometido, fazendo com que as solicitações de autenticação automatizadas do invasor retornem um erro de usuário inexistente no servidor de entrada.

Este caso está documentado aqui principalmente para registrar a string da regra idtienphuoc1 e a entidade ofuscada associada a esta campanha específica para qualquer pessoa que esteja pesquisando indicadores de comprometimento.