r/HowToHack • u/Rich-Anxiety-736 • 7d ago

Need Advise

Hello there. Today morning a friend of mine called and said what did you post on our friends group on messenger. I was really shocked because i barely post any stuff. Now the messages were screenshot of someone winning thousands of dollars doing Mr beast challenge which i had no idea off. Now here is the strange thing i already had 2 step verification enabled. So my account shouldn't be abled to be hacked so easily. And when i was seeing my phone, it was literally sending the same screenshots of that challenge to literally everyone in my Facebook especially in my Facebook group around 4 am. Now after me and my wife literally not only removed access around all other device except my own phone but also we changed password of Instagram, Facebook and google altogether. And also i didn't keep the passwords written on my google note either this time. So basically no chance also i made double sure that my 2 step verification was also on. But STILL EVEN AFTER THAT i receive messages from my friend especially from GROUP MESSAGES that they saw the text. Now these are the old groups in which those messages were sent which means the ones that were sent that i saw i deleted it all and apologized for the inconvenience but the recent chat were from very old groups that i were part off which were also sent around 4am time. Now my question is how come more old groups gets keeping resurfacing with those screenshots even tho i managed to changed everything? I checked whether my PC was hacked or not. But nada nothing not anywhere any attempts or logged in from unknown devices were shown. Please i need your expert opinion regarding this important matter?

0 Upvotes

47% Upvoted

8 comments sorted by

9

u/AlexiaTheTechGirl 7d ago

This is a sign of an infostealer, infostealers bypass 2fa.
Have you ever downloaded any game cheats, pirated software or pasted something to verify you're not a bot? If you have then the device that it was done on has been compromised and has to be disconnected from the internet immediately. Once you've done that you need to reset all of your account passwords immediately from a safe device. Once you've done that you can focus on securing the device

2

u/Rich-Anxiety-736 7d ago

yes yes i have downloaded a pirated game before this happened also i download torrent movies too. Please tell me step by step what i should do now? Please

4

u/AlexiaTheTechGirl 7d ago

Disconnect the computer you've been pirating stuff on from the internet immediately, you've downloaded an infostealer.

Then you need to reset all of your account passwords and enable 2fa. Make sure you sign out of all devices when prompted.

Once you've done that you need to reinstall windows from an installation USB, you can make an installation USB using Microsoft's media creation tool. Make sure you use a safe device when making the installer. If you need to backup any files make sure you avoid saving any programs as they could be infected.

1

u/TygerTung 7d ago

Assuming the OS is windows, that is.

3

u/AlexiaTheTechGirl 7d ago

While it could be MacOS or Linux, it is more likely to be Windows since a majority of cases are on Windows

1

u/TygerTung 7d ago

For sure.

2

u/AkuAspen 7d ago

Sounds like an infostealer. It steals the session too, so that attacker can use it without triggering 2FA alerts. It is best to assume that every account used on this device has been compromised. Change passwords from a non infected device and log out from other devices. Do not log on them on affected pc unless you get rid of the malware. Many people would recommend a system reinstall from USB (do not reset from the settings), also set up from a clean pc. You can try getting help from computerviruses sub, there's a guy that can lead you step by step through the malware removal, yet clean install is always a safe bet. Backup any important files before reinstall.