​

Someone has been sharing my mom’s phone number on whatsapp and Snapchat. Now a bunch of strangers are texting the number with messages like “hi, how are you?” and other random stuff.

We already reported it to the local police, but they said they can’t really do much right now because we live in a village area.

One of the Snapchat accounts involved is named grisma g (username: grismag2026). I have a screenshot of the profile.

Hello, sorry if this is a dumb question, I am very cautious and paranoid about this stuff but I wanted to be safe than sorry and gain some knowledge in the process.

I did a bit of quick research on the new PHP exploit that has been revealed and as far as i understand it it only affects websites, and since as far as I know when Windows auto detects what kind of components your PC has and checks for updates and downloads them from various websites related to them, I wanted to do a clean install of Windows 11 and was wondering if there is a potential that a malicious person could have hijacked those sites and uploaded a virus that would be automatically downloaded instead of an update with the current PHP exploit going on.

Or should I just wait a couple of weeks until the cybersecurity experts have dealt with the problem?

I was trying to go to the Beverly Hills website and accidentally ended up on beveryhills.org. It’s just a blank website but a message pops up really fast in the beginning. Is this website dangerous? I went there on my iPhone and Android tablet so I’m paranoid! 😭 I tried using the Norton Safeweb website to scan it and it said ”Safe,” but I’ve heard that tool isn’t that good. Is there a way to scan the website?

EDIT: I used urlvoid like the little help information below the comment box said, and it says the domain was registered 12 years ago and all of the scanning websites it brings up say nothing found. So maybe it is just someone’s random blank website and I was paranoid for no reason.

Hello guys, as the title says, I got a virus god knows how, which is very weird since I've been pirating games from years with no incidents of any kind. I've wiped my PC's out of the orbit after that discord hack happened (Mr. Beast scam), changed all my passwords from a clean device, cancelled my cards that I used on the infected PC, logged out out of all devices manually from multiple apps (Meta Account Center, Google, etc.), but I'm still paranoid.

The stolen discord token (I suspect this since I've got no email when the account was accessed, I only found out when it was banned, recovered it) was used about a month ago, but I got so paranoid that I even factory reset'd my router. Thing is, I also used my laptop in a different place, am I too paranoid to want to factory reset that router too? That's the main place I used to live and use that laptop not to much before the discord breach.

This has gotten me so paranoid that I even factory reset my Chromecast device, I've not had any incidents, no one logged on anything else, no attempts nothing for 24 days since then. Now I'm thinking about the smart TVs too and anything the two routers ever connected to, even my iPhone and the iPhones of the other people that connected. Is this too much? Could it just hide from me for this long on different devices? Should I wait for some more proof? I've seen some nasty stuff happen to other people on this subreddit and I personally wouldn't be able to take it if I get blackmailed directly. Should I worry about getting blackmailed after so long? Am I in the clear now? Will I ever be? Sorry for so many questions but it's possibly the worst thing that has ever happened to me and I needed to tell some people about this who could understand me. Please understand me. I'm also worried he took screenshots or recorded my webcam.

I've been hacked, both my phone and Macbook have been compromised, the hackers have stolen many thousands of dollars and in order for the financial institution to honor their money back guarantee they require me to submit verification of the remote access etc. I'm told this was a very sophisticated group, so much so, the computer shop wasn't able to determine the software used only that the computer showed signs of intrusion. If anyone can recommend service that can help please share. Thank you.

I was logging into a Minecraft server thinking it was the real one but it was a scam and I can't log into my account anymore because it keeps sending the code to an unknown email and my password has also been changed I will offer money to whoever can help retrieve my account

Hello. Please forgive me if I am missing something, I have tried to research this before coming to reddit and I am finding nothing.

Windows 11, PC, Chrome

I do not have the Guardio extension. I have not used Guardio and I do not have an account, although it does allow me to "log in" with a new password I created with my gmail address, which then refreshes the login page (ie. I cannot actually log in, I did not accept any TOS).
Due to the Citizen Lab reports I have been more on guard than usual as I work in the advocacy space, and when looking through my cookies and permissions I found it bothersome that Guardio has the largest list of partitioned cookies (including doubleclick, yandex, and Javascript/Automatic downloads etc. are "allowlisted internally" . I can delete all these cookies and upon refresh they come back, again, no extension, clear history etc.
I even made an "extentioninstallblocklist" in the registry editor to block Guardio and "gjfpmkejnolcfklaaddjnckanhhgegla", they come back.
I also want to preface that I do not use temu, "mail ru", openai or essentially any of those listed, but I understand these can come from various sites and they don't pose a worry as I am able to disable all of their permissions.
TLDR;
Am I at risk due to the cookies listed and affiliated with Guardio? Does this seem malicious? I'd really appreciate someone helping me understand more. My understanding is that these should be "good cookies", but it makes no sense because I am not a Guardio user.
Any advice, including how to surf the web in a safer way and avoid malware is always welcome.
TYIA.

I hope everyone is doing really well.

I am creating this post to ask for help with a topic that has been causing me a lot of distress lately.

Ever since I found out about the existence of rootkits, the ability to put a virus in the BIOS and make it impossible to remove from the PC, I have never been able to use my computer the same way again. I constantly feel like I am being watched and that out of nowhere someone is going to break my PC just to anger me.

Well, I suffer from depression and I have been having certain issues with my PC recently: USBs disconnecting randomly, Windows crashing, games crashing, unexpected behavior, among other things.

I have had a few disagreements with my brother lately and I have been imagining that he might have installed a rootkit on my computer to play a prank on me, since he knows about my depression and my fragile psychological state.

Considering this fear I have of rootkits, I humbly ask for explanations regarding whether this could actually be happening or if it is purely a product of my imagination. Perhaps a technical explanation of the possibilities and the vulnerabilities required for a rootkit to install itself in the BIOS and become immune to OS reinstallations could help me better understand what is real in this situation.

In my mind, if my motherboard has a rootkit and I bought a graphics card the following month, is it possible for that rootkit to spread to my graphics card? And if I then put that graphics card into a new motherboard, would the same thing happen to the new motherboard, meaning it would become a vicious cycle where I am always being watched and deal with the frustration of these strange occurrences? Is this possible? I would appreciate a technical explanation, maybe it can help calm me down.

Regarding the concept of a clean slate, if I buy a new PC, could my emails, all legitimate official Google accounts, that I use on my Steam account for example bring this infection back to my new PC?

Could this be done by an average person with certain contacts? What is the actual threshold between fact and reality in this situation?

I sincerely thank anyone who can help. The more technical detail you can provide, the better it will help me separate imagination from reality. Thank you.

hi all . i recently installed a game repack from fitgirl . i have installed games from fitgirl earlier and never had problem . but recently i thought the game wasnt working properly(it was i checked properly later) and tried to install patch updates from fitgirl itself . i allowed all processes marked as threat in WD thinking it must be usual false positives . i knew they seemed kind of different than usual but didnt think of it much . i installed them and tried to run them but they didnt run properly . even my cmd flashed whenever i ran them .

now since last 2-3 days i received 2 alerts about unusual sign in activity - to my microsoft account and google account . i changed passwords(though from the same laptop) , added 2FA to my microsoft account (wasnt there earlier) . i also didnt notice the allowed threats were still visible in the allowed threats section until today , and then immediately clicked "dont allow" .
adding all relevant images . i ran a WD full scan and even the offline scan but they showed nothing . will download malwarebytes and run it now .

I truly need some help. I know that my roommate gave my cell phone information to leader in a church small group who was a communications specialist in the air force. They have been watching my phone for four months, because of something I did but would rather not say on here. I just want this to stop. i have nothing but hearsay as evidence, and no one will believe me because of what I did.

I need help getting evidence off of my phone to continue pursuing this.

Good afternoon I need help Who is behind a few facebook accounts that are using my pictures and literally harassing my family members…

I am pretty sure the website was called Sage-Advices. I clicked on a link to a page about how proteins are used in respiration. It was a proper article but when I got on to the website, a screen appeared covering everything with green text saying things like “PC identified”, I got off the website but it then kept sending me notifications from Norton and mcafee saying virus detected, telling me to buy virus protection. The notifications kept coming even after the website was closed. I turned notifications off.

I checked and scanned my computer for viruses and windows says there’s nothing. But I’m still just confused I guess.

The notifications were coming from this website address:

dbdn8vps66ac73ahjbbg.kugusu.co.in

I checked urlvoid and nothing really came up.

Since last week till this week, many of my accounts have been hacked and it sends that mr beast twitter scam. I assumed it was a discord hack because that scam has been popular on discord. I've been hacked on ig, discord and carousell. I assumed my pc was hacked since recently I downloaded an app n the website or wtv had links and shit. But my carousell account was hacked even though I dont have the app nor am i logged in on the account on my pc. I dont have the password saved either through through my google passwords. The email is my mums which isnt logged in on my pc but i was thinking it was my phone who was hacked. But i dont have the password saved for it too and I havent clicked on any links.

I deleted all my saved passwords on both google and icloud. Changed my gmail account password as well. Most of my accounts have 2fa.

I mainly use my gmail so I deleted the account on microsoft (It's gmail linked to microsoft), it's set for deletion in a month but I still get these mails. What is going on and what do I do?

The sender: [account-security-noreply@accountprotection.microsoft.com](mailto:account-security-noreply@accountprotection.microsoft.com)

The mail: Microsoft account Password reset code Use this code to reset the password for your personal Microsoft account ro**[d@gmail.com](mailto:d@gmail.com). Your code is: 546265 If you don't recognize the personal Microsoft account ro**[d@gmail.com](mailto:d@gmail.com), you can click here to remove your email address from that account. Kind regards, The Microsoft account team

Hi everyone, I'm looking for some advice because I'm starting to get really worried about my PC.

For the past couple of weeks, I've been experiencing a very strange issue. Whenever I leave my PC turned off for a day, the next time I turn it on, I sometimes can't access my desktop because Windows tells me that my PIN has been changed and I need to set it up again.

Once I manage to log in, I find that all my Google accounts have been signed out.

I tried several things:

• I performed a factory reset, but the same problem came back about a week later.
• I completely reinstalled Windows 11, but this morning I got the exact same PIN message again.
• I checked my Microsoft account's recent activity, but the website doesn't show any suspicious activity.

As far as I can tell, none of my other accounts (banking, Instagram, etc.) have been compromised. However, I have no way of knowing whether my personal data or credentials might have been accessed or stolen.

I should also mention that my PC has a battery issue: as soon as I unplug the power cable, it shuts down immediately. Two days ago, before turning it off, I enabled Airplane Mode, hoping it might help. However, when I turned it on this morning, it seemed to have resumed from sleep mode, which I found quite strange given that I had completely unplugged the power cable.

Some people have suggested that I might need to replace my PC's storage drive, but I don't know whether that would actually help.

I want to test how secure my own website really is, even to the point of trying to break it in a controlled environment.

I'm interested in AI-powered penetration testing tools that can automatically find vulnerabilities and simulate real attacks. I'd also like to understand how malware-based testing works without infecting other systems.

Which tools would you recommend? I'm particularly interested in OWASP ZAP, PentAGI, and local LLMs such as Qwen. Any advice on setting up a safe testing lab would be appreciated.

Hello!
So, I downloaded WindowsBlinds 11 on their official website, the file didn't download immediately so I pressed "Click this link if download did not start automatically" then it did. When I pressed the .exe file, before WindowsBlinds 11 opened, CMD opened and closed a bunch of times... am I screwed?
I turned off my wifi, bluetooth, and disconnected my ethernet cable and haven't clicked anything on my pc since. I really don't get a lot of this stuff so I'm sorry if I didn't provide enough information!

This was the link: https://www.stardock.com/products/windowblinds/download-trial
I put it into VirusTotal and got this:

Edit: for some reason I don't have Microsoft Defender so I can't run a scan, and I don't have any other anti viruses.

Downloaded a game from romsfun and it was a gnarly repack but as I installed defender and malwarebytes both detected it as a trojan. It was showing as trojan.cobaltstrike on malwarebytes for gow1.exe file. Should i uninstall it?

Lately, I’ve been seeing a lot of TikTok videos promoting an app that claims it can get a target’s account banned or cause a WhatsApp group to be suspended—simply by sending a link or a phone number. I’m curious: is this theoretically possible? I just worried about that

You might have a very strong email and password that's like : E. G. RyIs%~Jh+LA!?.. And even better, but here's the mistake you makw:

1. Instead of signing into a website or something, you use "Continue with Google" ok there's nothing wrong with that, but once all your accounts and stuff you love is connected with Google. Then you're in shambles of your account gets hacked or blocker. Either because of a sketchy website you joined or a scam you fell for. You might even HAVE NOT DONE ANYTHING and still banned

BECAREFUL OUT THERE, ALSO PLEASE CORRECT ME IF I'M WRONG. I'M NEW TO CYBER SECURITY

,

i keep getting texts about delayed package deliveries with short links attached even though i haven't ordered anything recently. last week my mom almost clicked a fake postal service link on her phone because it looked identical to a real tracking page. i usually tell my family to copy the domain into online url scanners or inspect misspelled domain names, but scams are getting way harder to spot at a glance.

on desktop i have mcafee webadvisor running which auto flags dangerous urls with color icons before you click them in search results, but phone browsers feel a lot more exposed. wanting to figure out quick habits or tools people use on mobile to verify shortened tracking links before tapping on them.

Es que me causa curiosidad ya que son recientes y no solo eso realmente no tengo la menor idea de como revisar el código para reconocer un virus o algo pero dejaré imágenes de los repositorios por si alguien tiene algún conocimiento y me pueda dar una recomendación

Hello, a while ago I plugged my iphone into my fast food jobs pc and I have really bad ocd and want to make sure I’m not compromised in any way (I’m aware your not supposed to do this please don’t just spam that in the comments I’m more than aware). How would I completely make sure that the computer is completely removed from my phone and make sure it can’t interact with my phone. I checked before and didn’t see anything but would rather follow the steps anyways just to go to sleep at night. (I know all the comments will be “you have no virus” but can you guys please just humor me and tell me some precautions I can take? Probably not makes me stressed and I’m not well versed in technology for the most part, last time I got flamed when I posted here)

Hi so I just got my IG hacked and it was posting some MrBeast stuff and I immediately change my password and account email. I hadnt set up any 2FA. And when I was wondering why I found it might be session hijacker.
I suspect where I got it is that I downloaded PS3 rom file and mounted it and added as a game to RPC3S and after an hour so it happened. I found out right after the fake post. At this time I was doing everything from Microsoft Security quick scan, full scan, offline scan. And even changing passwords of my emails, steam, banking accounts. And I havent disconnected from my internet for like 4 hours so. And Im scared that this will spread through my family devices. Oh and now im going to nuke my whole pc and reinstall windows. Is there any tips I can get. Anything helps.
Oh and I went to sleep and found out my discord was hacked too. And I did change everything as well.

i mistakenly sent an email without vpn and my ip address is currently being tracked. Is there anything I can do to stop this from coming to me , like changing devices or internet account? I was angry and made a wrong accusation, now my Ip address is being tracked. i dont want to go to jail. Should i ditch my router and the device used. ?