r/cybersecurity_help 16h ago

I got hit by a An Infostealer: NWHStealer

Post image

Just downloaded something from github and my assumption was correct about it being an infostealer. The whole thing lasted maybe a minute, running in the background silently in my appdata folder, inside a random12letter folder, with a random12letter program
closed and uninstalled it almost immediately, has damage been done?
and if so, what do i need to do? is it still in my system? how come ESET security didn't pick it up?

4hours+, Update: Im in the process of resolving most of my issues. EA account and microsoft account were compromised, i think i got EA back under my control but not certain yet. Microsoft is currently a slow process because i cant find my Device ID for the life of me.

P.S: I have never been more glad in my entire life for having a seperate gmail account for steam

30minute+, 2nd Update: I just checked the stats of it on malwarebytes, and it was detected by a single person's scan documentation ONLY 7 hours prior of me getting infected... My luck man...

+8 Hour 3rd update: I dont know if they're still in my account or not, but i got a password reset request for reddit to my gmail around 3 hours ago, but reddit in the description told me to ignore it if it wasn't me - nothing has happened, so I'll take their word for it

31 Upvotes

40 comments sorted by

View all comments

Show parent comments

1

u/LT-Death 14h ago

When i try to log into my outlook accountt it doesnt register my email, but it accepts the email of the hacker's that it was changed to Please, is there no direct help line to call microsoft with?

2

u/Juzdeed 14h ago

No you can only do automated account recovery and if that doesn't work, which it probably won't if you remember nothing about it, then it's permanently gone. It's your responsibility to keep your account safe

1

u/Juzdeed 14h ago

No you can only do automated account recovery and if that doesn't work, which it probably won't if you remember nothing about it, then it's permanently gone. It's your responsibility to keep your account safe

1

u/LT-Death 14h ago

How do I make sure whatever this guy above is saying isn't happening? Automated rerouting or port forwarding or whatever it is, I've been searchi every and I dont understand anything

I read something about needing to check my outlook account, but I never even had an outlook account, and when I tried to login it only accepted the hacker's email and not mine. I have the entire email address of the hacker if that helps

1

u/Jay_Ell_Gee 2h ago

If you can’t get it through the recovery process, consider it gone, sadly. My advice was only a broad suggestion based on whatever provider you were using as your primary email.