how did I get hacked?
Discussion
Unsure how this happened so would appreciate an explanation if anyone knows.
On Monday I tried accessing my mobile banking to be told my password was incorrect.
Hopped onto the desktop and same again.
Rang the bank who didn't know what was wrong, turns out my username had changed having been the same since 2001. The new username was in the same format that my partner has for access to her online bank so assumed some updating had gone on and cocked up changing my username to the new format - oh well.
To change all my passwords etc I needed to receive a phonecall to type a password in - it wasn't ringing through to me at all though.
Went into the bank and sorted it all out there and then.
Got home, logged in and noticed all my money from 2 accounts had been transferred into my 3rd account (the one used on a daily basis). Now thinking about it I assume they did this to make a transfer to their account so it didn't show up as a suspicious transaction.
Here's where it gets interesting. Somehow they managed to put call forwarding on my phone (to a now unreachable number), then reset all my bank details - login and passwords - without anybody noticing!?
How did they a) hack my phone to do this? b) reset my bank details when there is only me who knows these details? (Not even the partner knows).
On Monday I tried accessing my mobile banking to be told my password was incorrect.
Hopped onto the desktop and same again.
Rang the bank who didn't know what was wrong, turns out my username had changed having been the same since 2001. The new username was in the same format that my partner has for access to her online bank so assumed some updating had gone on and cocked up changing my username to the new format - oh well.
To change all my passwords etc I needed to receive a phonecall to type a password in - it wasn't ringing through to me at all though.
Went into the bank and sorted it all out there and then.
Got home, logged in and noticed all my money from 2 accounts had been transferred into my 3rd account (the one used on a daily basis). Now thinking about it I assume they did this to make a transfer to their account so it didn't show up as a suspicious transaction.
Here's where it gets interesting. Somehow they managed to put call forwarding on my phone (to a now unreachable number), then reset all my bank details - login and passwords - without anybody noticing!?
How did they a) hack my phone to do this? b) reset my bank details when there is only me who knows these details? (Not even the partner knows).
The obvious one for your bank details is a keylogger on your PC (or a PC you use), apologies if it's a daft question but are you using anti virus software ?
Have a think about where you have used machines to log into your bank account.
Ask your bank if they can provide IP addresses of machines that have accessed your account, not sure if they will but worth a try.
Can't help with the phone although judging by the scandal recently of how easy it has been for journalists to hack voicemail on mobiles I'm guessing hacking a mobile, or rather hacking into the options a mobile number can use, isn't that difficult.
Have a think about where you have used machines to log into your bank account.
Ask your bank if they can provide IP addresses of machines that have accessed your account, not sure if they will but worth a try.
Can't help with the phone although judging by the scandal recently of how easy it has been for journalists to hack voicemail on mobiles I'm guessing hacking a mobile, or rather hacking into the options a mobile number can use, isn't that difficult.
I imagine the only thing that was hacked was your smartphone.
A smartphone hack can log your keystrokes, log internet use, record from the microphone and live stream from your camera.
Keystroke and web monitoring - they know your bank, the password and the details of your accounts.
Microphone recording - they know your verbal banking passwords (if they listen long enough, or you reset these passwords recently)
General phone hack - they instigated call forwarding.
I watched a video from a technology institute showing how easy this stuff is to do, rogue apps or malicious adverts in apps can be a route in.
Guff
A smartphone hack can log your keystrokes, log internet use, record from the microphone and live stream from your camera.
Keystroke and web monitoring - they know your bank, the password and the details of your accounts.
Microphone recording - they know your verbal banking passwords (if they listen long enough, or you reset these passwords recently)
General phone hack - they instigated call forwarding.
I watched a video from a technology institute showing how easy this stuff is to do, rogue apps or malicious adverts in apps can be a route in.
Guff
It might also be worth seeing if your bank provide card readers or other pieces of hardware so that even if someone gains access to your account they still can't do an awful lot. I can't create new payment instructions without using a card reader so all a hacker could do is either transfer money between accounts or send it to someone on my list of authorised payments. In theory they could send £5k (if I had £5k in there) to my local water company or wherever but, other than p*ss me off with the hassle of getting it back, it wouldn't be the end of the world.
guffhoover said:
I imagine the only thing that was hacked was your smartphone.
A smartphone hack can log your keystrokes, log internet use, record from the microphone and live stream from your camera.
Keystroke and web monitoring - they know your bank, the password and the details of your accounts.
Microphone recording - they know your verbal banking passwords (if they listen long enough, or you reset these passwords recently)
General phone hack - they instigated call forwarding.
I watched a video from a technology institute showing how easy this stuff is to do, rogue apps or malicious adverts in apps can be a route in.
Guff
That's interesting thanks. A smartphone hack can log your keystrokes, log internet use, record from the microphone and live stream from your camera.
Keystroke and web monitoring - they know your bank, the password and the details of your accounts.
Microphone recording - they know your verbal banking passwords (if they listen long enough, or you reset these passwords recently)
General phone hack - they instigated call forwarding.
I watched a video from a technology institute showing how easy this stuff is to do, rogue apps or malicious adverts in apps can be a route in.
Guff
There's not a lot to take as they're not really used accounts thankfully but I'll be keeping an eye on it now so hopefully won't happen again.
Bluedot said:
It might also be worth seeing if your bank provide card readers or other pieces of hardware so that even if someone gains access to your account they still can't do an awful lot. I can't create new payment instructions without using a card reader so all a hacker could do is either transfer money between accounts or send it to someone on my list of authorised payments. In theory they could send £5k (if I had £5k in there) to my local water company or wherever but, other than p*ss me off with the hassle of getting it back, it wouldn't be the end of the world.
I don't think Halifax offer this but they do a phone call for new payments to confirm so I'll have to keep checking to make sure call forwarding isn't put on again. It's quite possible that you haven't been hacked but check your equipment anyway. Fraudsters use a number of methods, they only need one piece of information to get started and then use social engineering to get the rest of the detail for your account.
If they have your account No, they will call up and effectively guess some security info. Agents are very tolerant as they will try to be helpful and in reality very few calls are actually fraudulent. By careful questioning they will get another piece of info and build up all the answers to your security questions.
Once they have this they will then be able to pass security and change the access details/address/telephone number and you know the rest.
If they have your account No, they will call up and effectively guess some security info. Agents are very tolerant as they will try to be helpful and in reality very few calls are actually fraudulent. By careful questioning they will get another piece of info and build up all the answers to your security questions.
Once they have this they will then be able to pass security and change the access details/address/telephone number and you know the rest.
Bullett said:
It's quite possible that you haven't been hacked but check your equipment anyway. Fraudsters use a number of methods, they only need one piece of information to get started and then use social engineering to get the rest of the detail for your account.
If they have your account No, they will call up and effectively guess some security info. Agents are very tolerant as they will try to be helpful and in reality very few calls are actually fraudulent. By careful questioning they will get another piece of info and build up all the answers to your security questions.
Once they have this they will then be able to pass security and change the access details/address/telephone number and you know the rest.
Cheers.If they have your account No, they will call up and effectively guess some security info. Agents are very tolerant as they will try to be helpful and in reality very few calls are actually fraudulent. By careful questioning they will get another piece of info and build up all the answers to your security questions.
Once they have this they will then be able to pass security and change the access details/address/telephone number and you know the rest.
I've changed all passwords to random things now rather than something that to be fair could be guessable.
Bluedot said:
Can't help with the phone although judging by the scandal recently of how easy it has been for journalists to hack voicemail on mobiles I'm guessing hacking a mobile, or rather hacking into the options a mobile number can use, isn't that difficult.
They didn't 'hack' a damn thing, just tried the default network passwords when ringing peoples voicemails and got lucky that no one ever changes itDavidJG said:
Also, have you ever used an open wi-fi network to access the bank either on phone or laptop?? Something like a hotel wifi or similar?? If so, that's another route for hackers to access your system and details.
I don't think I have but I'm not ruling it out. It's certainly something I haven't done recently anyway.
Oldandslow said:
I'm not usually one of the SWT brigade but this seems pretty suspicious to me. Random 3rd party picks a format similar to your partner's?
She's with lloyds who use the same type of security of mobile app as halifax one. It's 8 digit number or something for her log in which is what mine changed too.It's not her, she's with me 24/7 (both work from home) and I spend all her money instead of the other way round
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff