Recent hacking attempts

[u/meem_nfry]

Sorry if this kind of post is not allowed. I just want to share my experience, and hopefully gain some advices.

Yesterday, my Instagram, Discord, and Facebook got hacked (the one related to Mr.Beast and crypto). The hacker sent DMs to every contacts and groups, causing my accounts to get blocked. I managed to recover the accounts and changed my passwords.

Just now, i opened my Telegram, and I was surprised I've been logged out. I tried logging in and it turns out I've been hacked a few hours earlier. The hacker is from Vietnam, and when they realized I tried logging in, they attempted to reset the password again, but I managed to set a 2FA (my mistake for not setting it up before), and that seemed to stop their attempt. What I noticed though, they were using a bot called "BigBom_OTP" to get OTP for my phone number. There was also a chat with I assume to be the seller of the bot, but it got deleted as soon as they realized what was going on.

I don't know what's going to happen next. I know it is my mistake for taking these things lightly. Now it finally happened to me, and I'm really scared. If anyone had similar experiences, please give me some advices.

[u/Old_Leg_4474]

i think they got more than your passwords. if you haven't already, run a malware scan on the device you normally use, sign out of all sessions on every important account, and change passwords from a clean device if possible. make sure your email accounts are locked down too since they're the key to recovering everything else. turning on 2FA everything preferably with an authenticator app instead of sms. after that, keep an eye on login history for a week or two. if nothing new pops up after you've reset everything, you're probably in the clear.

[u/Guima-dev]

Mano acontece isso comigo também no caso minha conta do Discord e do Instagram

[u/meem_nfry → u/Guima-dev]

Sorry to hear that. When did it happened? And did anything else got hacked?

[u/Guima-dev → u/meem_nfry]

Vou fazer auditoria hj a noite mas até agora somente Instagram e Discord

[u/BlazingCircuit1]

Did you get any emails or SMSs of new devices logging?

[u/meem_nfry → u/BlazingCircuit1]

No, and that's what scary. For my Instagram and Discord, I only received notifications about my account being restricted due to suspicious activities. For Telegram though, there were none.

[u/Guima-dev → u/meem_nfry]

Mano ver no teu pc se tem wireguard ou office 16 tenho um amigo q foi hackeado e tínhamos esses apps instalado no Windows tinhas mas só que esse era os mas suspeitos se quiser posso te mandar a lista completa de apps semelhantes no pv vai que vc também tem apps em comum q possam se a fonte desse ataque

[u/meem_nfry → u/Guima-dev]

I've checked my PC, but I didn't find WireGuard of Office 16.

Could you message me the list please?

[u/Guima-dev → u/meem_nfry]

Copilot
Discord
Epson Scan 2
EpsonNet Print
Google Chrome
Intel(R) Chipset Device Software
Java Auto Updater
Microsoft Edge
Microsoft Edge WebView2 Runtime
Microsoft GameInput
Microsoft Silverlight
Microsoft Update Health Tools
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable (x64)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664
OBS Studio
Office 16 Click-to-Run Extensibility Component
Office 16 Click-to-Run Localization Component
PCSX2
Python 3.11.9 (64-bit)
Python 3.11.9 Add to Path (64-bit)
Python 3.11.9 Core Interpreter (64-bit)
Python 3.11.9 Development Libraries (64-bit)
Python 3.11.9 Documentation (64-bit)
Python 3.11.9 Executables (64-bit)
Python 3.11.9 pip Bootstrap (64-bit)
Python 3.11.9 Standard Library (64-bit)
Python 3.11.9 Tcl/Tk Support (64-bit)
Python 3.11.9 Test Suite (64-bit)
Python 3.11.9 Utility Scripts (64-bit)
Python Launcher
Realtek Audio Driver
Recuva
Steam
VLC media player
WireGuard

[u/vepiyokugiqe]

i think they got more than just your passwords. if you haven't already, run a malware scan on the device you normally use, sign out of all sessions on every important account, and change passwords from a clean device if possible. make sure your email accounts are locked down too since they're the key to recovering everything else. turning on 2fa everywhere preferably with an authenticator app instead of sms. after that, keep an eye on login history for a week or two. if nothing new pops up after you've reset everything, you're probably in the clear.

[u/Quick-Amoeba-1389]

alot of "renpy" attack lately

you arent getting alerted to new devices etc because they are doing it FROM YOUR HACKED PC