Hacked. What can I do now
Author
Discussion

magpies

Original Poster:

5,209 posts

213 months

Monday 30th December 2019
quotequote all


Got this yesterday on messenger and unfortunately tried to open. Then today received Facebook message to change password which I unfortunately did. It sent the same to everyone I know and I spent 30min's messaging everyone not to open.
What can I do now?

bitchstewie

68,232 posts

241 months

Monday 30th December 2019
quotequote all
Broadly speaking I would focus on:

Securing your email account if you haven't already done so and enable two factor on it if it lets you do so.

Similar with all your social media accounts.

If you don't already do so get a password manager and set strong unique passwords on all the sites you use.

Check your PC thoroughly for malware and if in any doubt wipe it as all of the above is to some degree pointless if someone else has control/access to the device you're using.

anonymous-user

85 months

Monday 30th December 2019
quotequote all
i would do a clean wipe. change all passwords to random ones, write them all down.

Ransoman

884 posts

121 months

Monday 30th December 2019
quotequote all
Just change your Facebook password through the browser in a private tab and run your virus scanner. If you use the old password anywhere, change it. Thats all you need to do.

anonymous-user

85 months

Monday 30th December 2019
quotequote all
Ransoman said:
Thats all you need to do.
he opened up a file. It is unknown what exes that started, and not all virus scanners detect all viruses and malware, so it is prudent to do much more than you suggest. Most likely there is a key logger already running.

magpies

Original Poster:

5,209 posts

213 months

Tuesday 31st December 2019
quotequote all
Cheers for the replies
I've changed my passwords on FB, Ebay, Paypal, Amazon, pingit and pistonheads
not sure where else as fortunately I do not do any other on-line banking

anonymous-user

85 months

Tuesday 31st December 2019
quotequote all
have you done a malware scan?

magpies

Original Poster:

5,209 posts

213 months

Tuesday 31st December 2019
quotequote all
Yes as soon as I could

ESET only found one and removed it

thebraketester

15,832 posts

169 months

Tuesday 31st December 2019
quotequote all
Surely graham should have been the giveaway?

bitchstewie

68,232 posts

241 months

Tuesday 31st December 2019
quotequote all
magpies said:
Yes as soon as I could

ESET only found one and removed it
I would run a few additional malware utilities too.

Malware Bytes and EMSI leap to mind but there are other standalone ones that will run but don't need to be installed.

Ransoman

884 posts

121 months

Tuesday 31st December 2019
quotequote all
Thesprucegoose said:
he opened up a file. It is unknown what exes that started, and not all virus scanners detect all viruses and malware, so it is prudent to do much more than you suggest. Most likely there is a key logger already running.
I can't tell from the screenshot what the file was. A good av scan will pickup its payload. The notification to change his fb password will most likely be a phishing email and that will be how the hacker got in. I deal with breaches all the time and i don't recall the last time I saw spyware. Certainly not in the last 2 years. Every breach I have dealt with involved phishing or password compromise due to being too weak or reused on weaker sites.

Captain Raymond Holt

12,424 posts

225 months

Tuesday 31st December 2019
quotequote all
I’d be inclined to change all passwords using a different pc/phone etc

xjay1337

15,966 posts

149 months

Tuesday 31st December 2019
quotequote all
Ransoman said:
Just change your Facebook password through the browser in a private tab and run your virus scanner. If you use the old password anywhere, change it. Thats all you need to do.
That's not going to do anything.

Using private browser tab doesn't protect you in any way.



anonymous-user

85 months

Tuesday 31st December 2019
quotequote all
If you have another device or access to one, use that to change the passwords and use different passwords on each account. Do not re-use passwords. A password manager can help including generating strong passwords.

On the device believed to be contaminated, start with anti-virus and anti malware software e.g. malwarebytes, etc.

Lastly, stop clicking on links and attachments people send you, you are the weakest link!

magpies

Original Poster:

5,209 posts

213 months

Tuesday 31st December 2019
quotequote all
gottans said:
If you have another device or access to one, use that to change the passwords and use different passwords on each account. Do not re-use passwords. A password manager can help including generating strong passwords.

On the device believed to be contaminated, start with anti-virus and anti malware software e.g. malwarebytes, etc.

Lastly, stop clicking on links and attachments people send you, you are the weakest link!
I did use my phone to change most of the passwords

Malwarebytes came up with zero smile

I very rarely click links but I had just come back from the pub and found that I left my common sense there - that's why I am not happy with myself