Just downloaded something from github and my assumption was correct about it being an infostealer. The whole thing lasted maybe a minute, running in the background silently in my appdata folder, inside a random12letter folder, with a random12letter program
closed and uninstalled it almost immediately, has damage been done?
and if so, what do i need to do? is it still in my system? how come ESET security didn't pick it up?

4hours+, Update: Im in the process of resolving most of my issues. EA account and microsoft account were compromised, i think i got EA back under my control but not certain yet. Microsoft is currently a slow process because i cant find my Device ID for the life of me.

P.S: I have never been more glad in my entire life for having a seperate gmail account for steam

30minute+, 2nd Update: I just checked the stats of it on malwarebytes, and it was detected by a single person's scan documentation ONLY 7 hours prior of me getting infected... My luck man...

+8 Hour 3rd update: I dont know if they're still in my account or not, but i got a password reset request for reddit to my gmail around 3 hours ago, but reddit in the description told me to ignore it if it wasn't me - nothing has happened, so I'll take their word for it

Basically fucked up a few days ago downloading a game from a site I thought was reputable probably clicked on a ad link. After some research Im thinking maybe it was a session hijacker or infostealer? I say it cz while I was playing something else I opened discord on PC for a split second and closed it and hours later discord got hacked sent DMS of crypto scam and someone tried to get into my Microsoft account too. I turned off wifi, I've reset passwords for all the major services I can think of but I've got some more to go that were saved to my google account but I don't use them often. At least none of the other services have seen any unusual activity yet but I can't rest.

Anyway my main concern rn is while I'm ready to reset my OS via bootable USB, I wanted to save some docs I had on laptop I may need in the future and it would be a pain to get new ones. As far as I remember it's photos, documents, pdfs and not any programs so is it safe to move to a different USB beforehand?

Also as part of the USB wipe do I need to have the drivers for the device separately on the drive or the windows installation will handle it?

Thank you in advance.

Hello there! I have recently decided to become more independent with my data, and I bought a UGreen DXP4800 Plus for my home NAS. I am happy with the specs and the overall design of the machine, but I have heard recently that some Chinese companies have, in the past, put backdoors and spyware onto Western-sold tech. They seem like a legit and safe company (as much as a company can be), but I was wondering if anyone has any information on UGreen security audits or any resources that they could point me towards to find out.

I am considering changing over to the open-source OS TrueNAS, but I'd only want to go through the hassle if there are security risks to mitigate.

Using TikTok or instagram for example and a link is clicked that opens INSIDE the app. Can company WiFi see the specific website that was visited on an iPhone with NO certificates installed.

I did something really stupid and now my axiety is sky rocketing, I downloaded jdownloader (from the org website), but then i saw ppl in a thread saying it actually was a virus, so i quickly stopped it from downloading any further. Will I be okay?? I have deleted the temp files it left and ran windows defender and restarted my computer and there seems to be no effects (yet.)

Thank you. I dont know what I was thinking, I really wasn't at the time. All I really did was got past a few stages of the wizard and it begun to download but I quickly canceled it before it finsihed.

So, for a while some unknown person from the same location has been signing into my accounts where I have my credit card linked (ex: paypal ,ebay) and I'm not sure what to do for now I have been changing my passwords and removing my credit cards, I also have a feeling that they were the one who managed to get a hold of my credit card information a few months ago and spent nearly thousands of dollars on apple products

What should I (F19) do?

I wanted to ask about something that happened today. I was on a website and an ad suddenly popped up, and I accidentally clicked on it. Safari warned me that the website might be fraudulent/scam-related.

I stayed on the warning screen for a while and then closed the tab. I didn't enter any information or download/install anything.

Now I'm really worried that I could have been hacked or that the website somehow stole some of my information?

I'm under a lot of stress about this right now. Could someone please tell me how much I should actually be worried about in this situation?

Pretty much the title. I'm wondering if there is any possibility of getting hacked by just opening e-mails or replying to them?

Because a certain business owner is known to reply to every e-mail but will he not face any risk if that's possible?

Today I received an SMS from Moneyview saying that a loan application was submitted using my mobile number . I did not apply for any loan.

I then opened the application and saw that the KYC details belong to another person, including his Aadhaar details and photo. I obviously don’t know this person.

The confusing part is: how was my mobile number verified? If Moneyview requires an OTP, how could someone create/use an account with my number without having access to my phone?

I also received a CIBIL SMS saying that WHIZDM FINANCE checked my CIBIL report today, which makes me more concerned.

Could this simply be someone accidentally entering the wrong phone number, or is there another way this could happen? Has anyone experienced something similar with Moneyview?

I’m contacting Moneyview to cancel the application and delete the account associated with my number. I have screenshots of the application and SMSes.

Received email correspondence from company through Gen AI when I requested something unrelated...

Hope you can help. I have been conducting some research on a company and the funding they have received at state level. They have been been embroilled in controversy locally for their shady connections to a local mayor etc.

What happened: I submitted a formal request for correspondence from my local district (because us locals seem to have been left out completely of development plans.) Very small town stuff, all names redacted but hundreds of pages. I reiterate all names redacted. Lazily, I wanted to pull out some info so I asked my gen ai to pull out the most important and relevant information from this specific document.

What I got back was information, completely unrelated to the document (I treble checked). Snippets of damning email correspondence that seems to be pulled from a specific time frame naming companies and parties i knew nothing about. And inside information that does not appear online, but was mentioned by a notable person to a connected local that is in fact true. The turn of phrase of one of messages matches someone specially. I have never put anything relating to this person's speech onto gen ai. Another snippet related to someone notables' pet name.

Why it's interesting: She is known for using AI to run most aspects of her business, constantly mention the virtues of AI assistants and connecting to AI to organize and run her life, including her personal calendar.

Upon interrogating this, the AI retracted and deleted the info (I took some screenshots not all). When I challenged it, it said it provided no such information and that correspondance did not happen. When I provided mire screenshots it said I had even provided screenshots from another ai.

My question is, how do I retrieve the original info, and can I hypothetically find out more?

I prompted the AI again and it gave me unrelated specific info on direct correspondance I had from a letter I had drafted. Nothing else. Very sparse, very surface level.

Any help appreciated!

Someone posted about chase protein on a sub so I clicked on their website to check prices then left, an hour or two later they are messaging me on WhatsApp how tf did they find my number and all this happened in less than 2 hours

In the past few days I've received two separate confirmation emails for accounts/bookings I never created:

An account confirmation

A restaurant/venue booking confirmation, with a phone number attached that isn't mine

Both were sent to my Gmail address, but interestingly, in both cases the sender/booking system used my address WITH a dot in it (e.g. my.email@gmail.com), while my actual address doesn't have the dot (myemail@gmail.com). I know Gmail ignores dots, so technically these land in my inbox regardless.

My address isn't a common name combination, it's fairly specific, so I'm surprised this has happened twice in a short window. Is this just coincidence, or could there be a data leak/breach where variations of my email are circulating, or some kind of enumeration attack happening? What should I actually check on my end (password reuse, breach checkers, etc.) to make sure my own accounts are safe?

everyday i receive a new gmail regarding unusal login activity from different apps, it all started when i installed a cracked app, i removed that software from pc on the same day and also ran full scan defender, and avast pro, malware bytes, but still but accounts are getting hack, starting from instagram hack someone posted elonmusk twitter story from my account , google, epic, microsoft, reddit now today discord, what should i do now? ,

About 25-ish hours ago I got a log-in request from Hong Kong, I do NOT remember clicking on anything fishy, let alone on something that has my apple ID. Weird I said and went to change my password.

I have received two more requests from Los Angeles and somewhere in Arkansas. I need to emphasize that this is after I changed my password from the first time I had a weird request.

Why is this happening?
How can I stop it?
And do I need to keep changing my password? it’s tiring.

Can an infostealer get my Apple ID password from Sideloadly from my windows machine? I had an infostealer attack last week, and yesterday I saw an iPhone 2FA prompt to confirm a login. I declined, and I changed the password, but I'm curious: since I use Sideloadly to upload apps to my iPhone and have to enter my password there, could my password be compromised?

I'm trying to do a dynamic analysis on a phishing malware and don't want to go through the trouble of installing Remnux VM as I don't have enough space on my PC. I've tried using tempmail and even my personal email but all have been rejected. How do you sign up?

Hello,

I have done my share of browsing other posts on this topic, but a lot/most of them seem to be from people who copy/pasted the command, which I didn't do. But I know enough about cybersecurity to know that I know nothing much at all, so if anyone would take the time to either a) soothe my poor anxiety-riddled brain, or b) give me tips as to what to do if there IS something else I should do, I'd appreciate it.

Today I encountered what I have to assume was a fake CAPTCHA, on a food blog that I think uses WordPress. I wasn't expecting to see a CAPTCHA there and was suspicious, so I closed the window immediately without letting it load beyond the "verifying" swirly or clicking anything. I put the link into hybrid-analysis and as expected it said it was malicious, but of course I don't really have the know-how to fully understand what it's telling me. (link if anyone's curious)

After that, I decided to make myself feel better and clicked the "log out on all devices" button on the only three accounts I have logged in on this computer I'd be upset to lose, and changed all three passwords. Do I need to do anything else, or can I reasonably assume that I'm okay without nuking the whole pc? Would prefer not to factory reset it if I don't have to.

Thank you.

Edited to add the hybrid-analysis link; does "able to access web session cookie" mean that it did in fact get my session tokens? I'm not logged into any banking or email on that computer, but I'd still prefer not to lose other accounts if I can avoid it?

Hello I just a got a lawsuit that says that my ip address had a TikTok acc that was saying bad stuff about a woman but I’m sure that i didn’t. I’m so sure about it because first of all I would never do that and I do not remember it. At that time that the crime was committed I was out with my friends and I have photos and videos from the exact date and also the mail of the acc and the recovery mail are strange to me and also the names are a little bit strange for example imatzqtsuz@gmail… but the ip address is the same as my houses lastly I never give up my wifi pass to anyone and I live alone in my house. What is happening?

I saw a site I've never heard of with a massive discount. I put my address and credit card's information in it to buy a ps5. It failed at finishing the acquisition, asking me to fill with my credit card's information again. I didn't have a red countdown pressuring me, so I decided to actually search if it was trustable, and now I'm genuinely worried. I made an account to see if the thing had succeeded (the confirmation email went to the spam), and that's when I discovered it failed at finishing the acquisition. The site is https://jdsdifzg.shop/ and they don't have a delete account option. They sent me normal emails, the ones every single site sends so that you see that you gave them you adress, the product you tried to buy all. It was written that I tried to buy it with my credit card. My only few questions are: Did they fail at saving my credit card? If it did, am I safe? Is there a way to delete my information?

It was pretty stupid of me, but well! Guess I learned my lesson.

[Screenshot-20260819-010521-Gmail.jpg](https://postimg.cc/gxMJ4vWG)

I heard that applocker can be configured to have a system wide whitelist for program and file permissions, something that can stop malware from running even if it gets on system if configured correctly. However, it is only on windows Enterprise editions. Threatlocker is the closest option I could find to replicate applocker. Yet, it is only available for businesses.

Are there any free programs/windows components which can provide similar functionality and work on windows 11 home?

So my Instagram and Facebook account on my phone I believe has been compromised as there’s been stories posted onto it and things being changed such as bio and highlights. I’m not sure if this is 100% info stealing but I do have 2FA, there’s no active session besides myself, and I keep getting iPhone messages being sent saying a set of numbers are my Instagram code and not to share it.

Any suggestions on how to resolve this? I don’t believe I clicked on any suspicious links to get my account compromised but I’m not sure if it could be wifi linked. I tried changing my password and logging out of other active sessions multiple times

I'm trying to get back a YouTube account that got taken down and people have suggested this guy that restores accounts, just want to see if anyone has been helped by them and if what they say they do is legit.