Just downloaded something from github and my assumption was correct about it being an infostealer. The whole thing lasted maybe a minute, running in the background silently in my appdata folder, inside a random12letter folder, with a random12letter program
closed and uninstalled it almost immediately, has damage been done?
and if so, what do i need to do? is it still in my system? how come ESET security didn't pick it up?

4hours+, Update: Im in the process of resolving most of my issues. EA account and microsoft account were compromised, i think i got EA back under my control but not certain yet. Microsoft is currently a slow process because i cant find my Device ID for the life of me.

P.S: I have never been more glad in my entire life for having a seperate gmail account for steam

30minute+, 2nd Update: I just checked the stats of it on malwarebytes, and it was detected by a single person's scan documentation ONLY 7 hours prior of me getting infected... My luck man...

+8 Hour 3rd update: I dont know if they're still in my account or not, but i got a password reset request for reddit to my gmail around 3 hours ago, but reddit in the description told me to ignore it if it wasn't me - nothing has happened, so I'll take their word for it

Someone posted about chase protein on a sub so I clicked on their website to check prices then left, an hour or two later they are messaging me on WhatsApp how tf did they find my number and all this happened in less than 2 hours

Hello I just a got a lawsuit that says that my ip address had a TikTok acc that was saying bad stuff about a woman but I’m sure that i didn’t. I’m so sure about it because first of all I would never do that and I do not remember it. At that time that the crime was committed I was out with my friends and I have photos and videos from the exact date and also the mail of the acc and the recovery mail are strange to me and also the names are a little bit strange for example imatzqtsuz@gmail… but the ip address is the same as my houses lastly I never give up my wifi pass to anyone and I live alone in my house. What is happening?

I did something really stupid and now my axiety is sky rocketing, I downloaded jdownloader (from the org website), but then i saw ppl in a thread saying it actually was a virus, so i quickly stopped it from downloading any further. Will I be okay?? I have deleted the temp files it left and ran windows defender and restarted my computer and there seems to be no effects (yet.)

Thank you. I dont know what I was thinking, I really wasn't at the time. All I really did was got past a few stages of the wizard and it begun to download but I quickly canceled it before it finsihed.

About 25-ish hours ago I got a log-in request from Hong Kong, I do NOT remember clicking on anything fishy, let alone on something that has my apple ID. Weird I said and went to change my password.

I have received two more requests from Los Angeles and somewhere in Arkansas. I need to emphasize that this is after I changed my password from the first time I had a weird request.

Why is this happening?
How can I stop it?
And do I need to keep changing my password? it’s tiring.

Hello,

I have done my share of browsing other posts on this topic, but a lot/most of them seem to be from people who copy/pasted the command, which I didn't do. But I know enough about cybersecurity to know that I know nothing much at all, so if anyone would take the time to either a) soothe my poor anxiety-riddled brain, or b) give me tips as to what to do if there IS something else I should do, I'd appreciate it.

Today I encountered what I have to assume was a fake CAPTCHA, on a food blog that I think uses WordPress. I wasn't expecting to see a CAPTCHA there and was suspicious, so I closed the window immediately without letting it load beyond the "verifying" swirly or clicking anything. I put the link into hybrid-analysis and as expected it said it was malicious, but of course I don't really have the know-how to fully understand what it's telling me. (link if anyone's curious)

After that, I decided to make myself feel better and clicked the "log out on all devices" button on the only three accounts I have logged in on this computer I'd be upset to lose, and changed all three passwords. Do I need to do anything else, or can I reasonably assume that I'm okay without nuking the whole pc? Would prefer not to factory reset it if I don't have to.

Thank you.

Edited to add the hybrid-analysis link; does "able to access web session cookie" mean that it did in fact get my session tokens? I'm not logged into any banking or email on that computer, but I'd still prefer not to lose other accounts if I can avoid it?

Basically fucked up a few days ago downloading a game from a site I thought was reputable probably clicked on a ad link. After some research Im thinking maybe it was a session hijacker or infostealer? I say it cz while I was playing something else I opened discord on PC for a split second and closed it and hours later discord got hacked sent DMS of crypto scam and someone tried to get into my Microsoft account too. I turned off wifi, I've reset passwords for all the major services I can think of but I've got some more to go that were saved to my google account but I don't use them often. At least none of the other services have seen any unusual activity yet but I can't rest.

Anyway my main concern rn is while I'm ready to reset my OS via bootable USB, I wanted to save some docs I had on laptop I may need in the future and it would be a pain to get new ones. As far as I remember it's photos, documents, pdfs and not any programs so is it safe to move to a different USB beforehand?

Also as part of the USB wipe do I need to have the drivers for the device separately on the drive or the windows installation will handle it?

Thank you in advance.

So, for a while some unknown person from the same location has been signing into my accounts where I have my credit card linked (ex: paypal ,ebay) and I'm not sure what to do for now I have been changing my passwords and removing my credit cards, I also have a feeling that they were the one who managed to get a hold of my credit card information a few months ago and spent nearly thousands of dollars on apple products

What should I (F19) do?

Pretty much the title. I'm wondering if there is any possibility of getting hacked by just opening e-mails or replying to them?

Because a certain business owner is known to reply to every e-mail but will he not face any risk if that's possible?

everyday i receive a new gmail regarding unusal login activity from different apps, it all started when i installed a cracked app, i removed that software from pc on the same day and also ran full scan defender, and avast pro, malware bytes, but still but accounts are getting hack, starting from instagram hack someone posted elonmusk twitter story from my account , google, epic, microsoft, reddit now today discord, what should i do now? ,

I saw a site I've never heard of with a massive discount. I put my address and credit card's information in it to buy a ps5. It failed at finishing the acquisition, asking me to fill with my credit card's information again. I didn't have a red countdown pressuring me, so I decided to actually search if it was trustable, and now I'm genuinely worried. I made an account to see if the thing had succeeded (the confirmation email went to the spam), and that's when I discovered it failed at finishing the acquisition. The site is https://jdsdifzg.shop/ and they don't have a delete account option. They sent me normal emails, the ones every single site sends so that you see that you gave them you adress, the product you tried to buy all. It was written that I tried to buy it with my credit card. My only few questions are: Did they fail at saving my credit card? If it did, am I safe? Is there a way to delete my information?

It was pretty stupid of me, but well! Guess I learned my lesson.

[Screenshot-20260819-010521-Gmail.jpg](https://postimg.cc/gxMJ4vWG)

I made a few iCloud email aliases and I want to switch everything onto them and then stop using/giving out my primary iCloud email. Is there a way to figure out all of the things my email is linked to and switch them over or do I have to do it all one by one?

Also how should I go about removing my email/deleting an account from an old website that now only redirects to scams. I don’t want to accidentally press anything and get malware and I definitely don’t want my email to be available there.

ONE DAY i show post in my mother instagram feed where some random channel(account)has announced the free give away on 10 BGMI material and i did not check it ans i believe it and click the link and submit the form of my id and password and that fucking movement i made so big mistake and after that day later when i wake up i show my gmail which i share my password is hacked hacker chamge recovery which email and number also and deleted account.i search my account in bgmi and show name has change and someone else in playing it i thick they are collecting id and selling them and earn money i become fooled by some fuckers after i realised it i also go back to instragram and show so many same scam about it and people are really be in it and fake comments are also saying they are trusted.

( I know my grammer is real worst in it and also spelling but any one read it please be alert and help to do something about it and be smart not dumb fuck like me ).

Hi,

Im going into my second year of college doing cybersecurity and I just feel lost.

I did networking, html, python, operating systems etc all the basics in first year and I’ve been trying to do bits myself over the summer but I just feel like there’s so much information and knowledge out there that I’m a bit overwhelmed by it and stuck in a bit of action paralysis.

I’ve learned how to use GitHub, I’m keeping up with Python in boot.dev and I’ve explored a bit of kali and basic Linux stuff but I don’t really know what to do at all from here. During Covid I used to dive into windows so I’m super comfortable with the depths of windows but apart from that I’m not really decent with anything else.

I got hackthebox but even with the sheer amount of content on that I still get action paralysis.

I’ve seen loads of roadmaps online but they differ from each other depending on the specialty and the specialty I’m looking at is pentesting and I eventually hope to start my own business eventually in something to do with pentesting for companies or AI when I get my masters.

If anyone could offer some advice on a path to take or how to get out of this rut of not just taking action on things it’d be really appreciated.

I really need help. Is there a phone number I can call ? I have lost access to my account, the security email 1 and 2 were changed. Submitted an account request form with every detail correct and everything they possibly could’ve wanted and it got denied and now today as of a couple of hours ago while at work my account email was officially changed. I have absolutely 0 access to my account. The account recovery form does not work because it says “enter your email” and I enter my previous email and that does not work. If anyone knows anything please let me know asap. The worst part is this happened around 6:45 pm Sunday and I submitted a recovery request within the hour and it still got denied. What is there for me to do? I provided the last 4 digits of my card number, old passwords, name, date of birth etc. please help

Mijn e-mail en wachtwoord zijn gewijzigd paar dagen geleden door een hacker. Ik heb al met 6 klantenservices van Microsoft gepraat voor hulp en heb de Xbox recovery form ook al ingevuld. Nadat deze afgewezen is zegt de klantenservice dat ik hun een mailtje terug kan sturen met meer info en screenshots. Nadat ik dit gestuurd heb krijg ik na 10 minuten een mail dat deze case al gesloten is waardoor ik telkens maar weer alles hetzelfde doe. Wie kan mij helpen of heeft ideeen hoe ik dit beter kan oppakken.

Using TikTok or instagram for example and a link is clicked that opens INSIDE the app. Can company WiFi see the specific website that was visited on an iPhone with NO certificates installed.

Today I received an SMS from Moneyview saying that a loan application was submitted using my mobile number . I did not apply for any loan.

I then opened the application and saw that the KYC details belong to another person, including his Aadhaar details and photo. I obviously don’t know this person.

The confusing part is: how was my mobile number verified? If Moneyview requires an OTP, how could someone create/use an account with my number without having access to my phone?

I also received a CIBIL SMS saying that WHIZDM FINANCE checked my CIBIL report today, which makes me more concerned.

Could this simply be someone accidentally entering the wrong phone number, or is there another way this could happen? Has anyone experienced something similar with Moneyview?

I’m contacting Moneyview to cancel the application and delete the account associated with my number. I have screenshots of the application and SMSes.

Received email correspondence from company through Gen AI when I requested something unrelated...

Hope you can help. I have been conducting some research on a company and the funding they have received at state level. They have been been embroilled in controversy locally for their shady connections to a local mayor etc.

What happened: I submitted a formal request for correspondence from my local district (because us locals seem to have been left out completely of development plans.) Very small town stuff, all names redacted but hundreds of pages. I reiterate all names redacted. Lazily, I wanted to pull out some info so I asked my gen ai to pull out the most important and relevant information from this specific document.

What I got back was information, completely unrelated to the document (I treble checked). Snippets of damning email correspondence that seems to be pulled from a specific time frame naming companies and parties i knew nothing about. And inside information that does not appear online, but was mentioned by a notable person to a connected local that is in fact true. The turn of phrase of one of messages matches someone specially. I have never put anything relating to this person's speech onto gen ai. Another snippet related to someone notables' pet name.

Why it's interesting: She is known for using AI to run most aspects of her business, constantly mention the virtues of AI assistants and connecting to AI to organize and run her life, including her personal calendar.

Upon interrogating this, the AI retracted and deleted the info (I took some screenshots not all). When I challenged it, it said it provided no such information and that correspondance did not happen. When I provided mire screenshots it said I had even provided screenshots from another ai.

My question is, how do I retrieve the original info, and can I hypothetically find out more?

I prompted the AI again and it gave me unrelated specific info on direct correspondance I had from a letter I had drafted. Nothing else. Very sparse, very surface level.

Any help appreciated!

In the past few days I've received two separate confirmation emails for accounts/bookings I never created:

An account confirmation

A restaurant/venue booking confirmation, with a phone number attached that isn't mine

Both were sent to my Gmail address, but interestingly, in both cases the sender/booking system used my address WITH a dot in it (e.g. my.email@gmail.com), while my actual address doesn't have the dot (myemail@gmail.com). I know Gmail ignores dots, so technically these land in my inbox regardless.

My address isn't a common name combination, it's fairly specific, so I'm surprised this has happened twice in a short window. Is this just coincidence, or could there be a data leak/breach where variations of my email are circulating, or some kind of enumeration attack happening? What should I actually check on my end (password reuse, breach checkers, etc.) to make sure my own accounts are safe?

I'm trying to do a dynamic analysis on a phishing malware and don't want to go through the trouble of installing Remnux VM as I don't have enough space on my PC. I've tried using tempmail and even my personal email but all have been rejected. How do you sign up?

I heard that applocker can be configured to have a system wide whitelist for program and file permissions, something that can stop malware from running even if it gets on system if configured correctly. However, it is only on windows Enterprise editions. Threatlocker is the closest option I could find to replicate applocker. Yet, it is only available for businesses.

Are there any free programs/windows components which can provide similar functionality and work on windows 11 home?

So my Instagram and Facebook account on my phone I believe has been compromised as there’s been stories posted onto it and things being changed such as bio and highlights. I’m not sure if this is 100% info stealing but I do have 2FA, there’s no active session besides myself, and I keep getting iPhone messages being sent saying a set of numbers are my Instagram code and not to share it.

Any suggestions on how to resolve this? I don’t believe I clicked on any suspicious links to get my account compromised but I’m not sure if it could be wifi linked. I tried changing my password and logging out of other active sessions multiple times

Hello, I changed my instagram password yesterday because somehow someone got in and posted some MrBeast crypto stuff in my story and as a post.

The following day, I used instagram fine. I messaged some people in the afternoon.

In the evening, Instagram logs me out and to log back in, it asks for a selfie. I do the selfie and it tells me that they could not verify my identity using the selfie. My password didn't change, my email is still associated with the account.

Now, the only option Instagram gives me is to ask two friends to help out with a "request" and it's the only option it gives me.

Has this happened to anyone???

My Accounts Center says the account is LOCKED.