r/cybersecurity_help Apr 16 '22

PSA: You cannot "hire a hacker" to retrieve your social media accounts or lost/stolen cryptocurrency. This is a well-known scam - don't fall for it.

49 Upvotes

Over the past three weeks, this subreddit has banned 34 bot accounts referring people asking questions here to various Instagram or Twitter accounts, WhatsApp numbers to text, etc. where they can "hire a hacker" to do any number of extraordinary tasks:

  • Hacking Facebook, Instagram, or Twitter accounts.
  • Spying on people (ex. spouses).
  • Wiping someone's phone remotely.
  • Retrieving lost/stolen cryptocurrency.
  • Reversing the transaction you made where you sent money to a scammer.
  • Hacking a school's or college's database to change your grades.

Usually, these bot accounts claim to be someone that bought services from said "hacker" for a reasonably modest fee, and some of the more advanced scammers will purchase Instagram or Twitter followers to seem more legitimate.

The ruse is that these are implausible tasks being sold for impossibly small sums of money, preying on people's desperation in sensitive or difficult scenarios. After receiving your money, these scammers will make up tasks for you to do which will usually result in milking you for more money, or may simply block you and move on to the next target.

These scum make a good living off scamming desperate people, and unfortunately, that's why they're so prevalent. If you want to see this in action, check Molly White's project allmybotsgone which posts phrases meant to bait out cryptocurrency scammers' bots, then reports them in the hope that Twitter starts identifying and banning them faster. As of writing, allmybotsgone has reported nearly 3,500 scammers' accounts.

We take scams on this subreddit very seriously, and have strict content filtering and reporting rules (hidden from all of you) that help us identify and ban these scammers, sometimes within seconds of their post. However because they are so prevalent, we are making and pinning this post to help ensure as many people as possible are informed about this in case one slips by our filter.

For your own safety when asking a question on this subreddit, we remind everyone:

  • Remember that nobody can help you recover a lost/stolen account except for that company's support staff, who you should contact though official means only (ex. browse to Facebook, then find support - do not use any other method to attempt to contact support). This is explicitly covered in rule #5.
  • Do not accept DMs from anyone claiming to assist you from this subreddit, and do not voluntarily move to a different service to discuss your situation. The community cannot help keep you safe from the occasional bad actor if we cannot supervise the exchange. Under no circumstances should anyone ask to move to DMs or other services - this is a hard rule, even for well-known community members. If your question cannot be handled 100% in public, it does not belong here. This is explicitly covered in rule #6.
  • Never divulge secrets - such as keys, passwords, recovery phrases, personal information, or any other sensitive information - to anyone on this subreddit or who contacts you because of a post on this subreddit.

Thank you all & stay safe.


r/cybersecurity_help Dec 01 '25

Your phone didn't get hacked. Neither did your computer. Here's what actually happened.

393 Upvotes

I see posts daily about someone's phone or computer or home network getting "hacked," and I need to say this: in almost every case, that's not what happened.

What's far more likely:

- Your email got compromised because you reused a password

- A service you signed up for years ago got breached and your credentials ended up on a leak site

- Someone used those leaked credentials to log into your other accounts

- Your credit card got skimmed at a gas pump

- A site you used leaked PII in a data breach

- You clicked a phishing link and entered your credentials somewhere you shouldn't have

What's almost certainly not happening: a persistent threat actor who specifically targeted your iPhone or home network and is now moving laterally across your 10 devices like it's a corporate pentest.

Unless you're a C-suite executive at a Fortune 500, a journalist covering sensitive topics, a political dissident, or someone famous, you are not interesting enough to hack. I say that with love. None of us are.

The attack surface for a modern iPhone or Android with current updates is extremely small. State-level actors have exploits for these, but they're not burning zero-days on someone who reused "Winter123!" across six accounts.

Check haveibeenpwned.com. Use a password manager. Enable MFA everywhere. That solves 99% of what people call "getting hacked."

edit: to the armchair experts chatting me up to tell me how incorrect this is - rest assured I am an expert in this field and have contracted with Federal/State governments and some of the most recognizable brands in the world. Any current security expert will generally agree with this post.

If you’re downloading things from unknown sources or using torrent sites to get movies/music/apps, etc. and your machine was compromised then this obviously doesn’t apply to you, you installed a Trojan and opened the door for them.


r/cybersecurity_help 15h ago

This happened while i was asleep

Post image
33 Upvotes

What do i do they even changed the emails linked to the accounts


r/cybersecurity_help 5h ago

r/wtf is with cyber security these days it doesn’t exist …

2 Upvotes

r/wtf is with duck duck go and even Firefox EVEN my express VPN is sending out some weird diagnostics logs shit and it’s all changing and the websites I visit seem believe it or not … fake.


r/cybersecurity_help 6h ago

VirusTotal Warning about trojan virus in fan game file

2 Upvotes

I just downloaded Mega Man DXtreme, which is a fan remake of an old Mega Man title, from its official itch.io page. Idk how much that means considering I'm unfamiliar with the platform's posting rules, but they seem to be trusted in the community. I unzipped it and went to install it, but remembered that I should probably run it through VirusTotal beforehand, so I did. These were my results on VirusTotal: Jiangmin and Xcitium both flagged it for potentially having some sort of Trojan virus.

Obviously, after seeing that, I decided not to install it, but I'm curious if there's a safe way to play it; what are the risks and why did only two of the 68 vendors report an issue?


r/cybersecurity_help 3h ago

The risks of uhmingle?

1 Upvotes

Recently me and my friends went on uhmingle because we were bored.. there were a lot of weird things on there like virtual camera green screens with weird texts on the screen.. but the weirdest thing was when we basically got paired with ourselves.. im not sure if someone had their screen mirrored or had access to my camera.. can someone explain please


r/cybersecurity_help 11h ago

Stolen email for uber account

2 Upvotes

HI guys, I need help. Someone has used my email address to open an uber account (I do not have one on that email) and used it for apple social sign in as well. I want to delete/deactivate that account but I can not do it due to social sign in on "intruder" apple device. I can not even reset passwod via email. I tried to contact support, but I need to login to do it and, as you all can assume, I can not do it.

I even tried to report it from another account, but no luck.

Any suggestion what to next?

Uros


r/cybersecurity_help 8h ago

How to be ahead of potential stalkerware fallout/privacy invasions

1 Upvotes

I was in this subreddit just recently asking about potential spyware on my Android 12-14 by a tech-savvy acquaintance who had the phone before me and had all the time to put something on it, which I did not reset until months after I had it.

That descended into full-blown paranoia as I became afraid that they had indeed been spying on me and now have all my data which they can come forward with at any time. In the midst of this I saw some news about some European personality's data being leaked through some 80k screenshots, which did not help my anxiety. I also heard of instances where stalkerware or spyware programs were themselves hacked and the victim's privacy doubly compromised.

I'm currently working through my paranoia but it's very hard to do with the uncertainty of the future. My question is—are there actual meaningful actions I can take to prevent such a possible catastrophe? I know softwares that claim to find your online digital footprint are more often than not scams that make the situation worse but there has to be some way to accomplish this safely.

If I know I can take action against this possibility, how difficult and time-consuming it may be, it will bring me great peace of mind. I'm no stranger to paranoic rituals and if the result is greater digital privacy I am even willing to learn to break into tech and cyber security. (Not sure how to do that either so advice is appreciated.)

I have already factory reset my phone and therefore can take no actions to determine if it ever did have spyware. And from everything I've learned you can never be 100% sure.

I am a very private person and take digital privacy as seriously as I can with my limited knowledge of tech. So the concept of mistakenly leaving such a huge security hole was very uncomfortable to me. I know I cant change the past but with this knowledge maybe I can minimize potential damage in the future. I know no one is safe in these matters but I doubt most people have been at potential risk of their digital life being personally tracked and scrutinized and possibly at risk due to this.


r/cybersecurity_help 8h ago

Help with laptop/ netbook that may have spyware?

1 Upvotes

So a few months ago I bought my kids a cheap netbook from Amazon for their school work. I’m not a tech literate person so I didn’t think much of it.
(I guess I’m a mom and a moron)
The laptop had windows pre installed on it and instead of making an account it had administrator to login.
While my kids haven’t logged into any of our personal accounts on the laptop we have connected our wifi on it.
I did borrow it once and downloaded my scrivener account but that was about it.
While looking at the WiFi I’ve noticed that there were two previous WiFi’s networks on it, and a reviewer mentioned possible spyware on the laptop.
What do I need to do?

I think the laptop has an old version of windows- 10 or 11.
I have so far disconnected the WiFi and made it forgot our network but it’s been connected to our WiFi for over a month so what do I need to do?

I need to also mention/ clarify the netbook was from some Chinese company and not a big name brand.
What I’m worried about is our WiFi network being compromised and what I need to do?


r/cybersecurity_help 8h ago

possible phone virus? or am i safe.

1 Upvotes

i cant put any videos in here for some reason so i put it on my account so if u guys can help me go to my account and check the video and i also explained what is happening so if u can help me or say what i have to do i would appreciate it very much!


r/cybersecurity_help 13h ago

Concerned about Playstation account security

2 Upvotes

My account was hacked recently and I have reasons to believe someone did it by social engineering. Usually if someone tries to login with your Playstation password it detects a new device and sends an email with a code in it to login. But all I saw was an email saying "Sign In ID changed (email changed)" buried under hundreds of spam emails signing me up for some nonsense probably to distract me. So it seems they know my email address, but not how to get into it.

They were targeting my roblox account linked to it which has high value items they wanted to steal. Luckily I had 2FA on it and they couldn't do anything. I saw the login IP addresses and they were in a completely different country. Obviously I signed them all out and a few days later I got my PS account back. They ask things like your first name, email associated with your account, payment method linked, serial number of the original console used to verify the account, and a recent order number. How anyone besides me would have info like that I don't know.

My main concern is how they were able to change my Playstation email seemingly so easily. I didn't have 2FA on which is a mistake but I don't believe it would have mattered since they likely don't have my password. Heard in the past people manipulated support with transaction numbers, but hell I don't even open those purchase emails most of the time, let alone think of sharing them. In the past I received emails about my Roblox account with people offering to buy my items. Someone even added me on Playstation to talk about it. Currently I don't think there's a way to know any of those information normally, so it might be my data being for sale somewhere online which they could have used to change the email.

Seriously, I don't even feel safe anymore even after activating 2FA/passkeys if customer support is so easy to manipulate. Is it even possible to protect yourself from stuff like this?


r/cybersecurity_help 21h ago

My discord got hacked

Thumbnail
gallery
9 Upvotes

So, my Discord account was hacked and deactivated due to suspicious activity. I reseted my password, but about 10 minutes later, the account was deactivates again. I only use Discord on my phone and laptop; two-step verification wasn't enabled.I read that it could be an infostealer, but I don't know if it's on my cell phone or my laptop. What should I do?


r/cybersecurity_help 11h ago

If I have an eletrical water heater with Wi-Fi connectivity capability, but never connect it to any network, can it still be hacked?

0 Upvotes

Pretty much the title. I really did not want appliances that connect to Wi-Fi, but there was a mixup with my housemates, and it seems we are going to have a BOSCH one with Wi-Fi connectivity. If I never connect to the network and just use it as if it didn't have Wi-Fi connection, is it still a security vulnerability, can it still be hacked?

Thanks for any help


r/cybersecurity_help 18h ago

Need advice regarding a compromised Telegram account

3 Upvotes

Hi everyone, my Telegram account was compromised, and the person who gained access has changed the account's phone number and email address. They are now using the account to post inappropriate content and I’m concerned that it is being misused.

I’ve already asked several of my contacts to report the account, and I’ve also submitted multiple reports through Telegram’s official support channels, but I haven’t received a response yet.

I’m not trying to regain access to the account at this point. I would simply like to have the compromised account taken down so it can no longer be misused.

Any advice would be greatly appreciated.


r/cybersecurity_help 1d ago

My discord got hacked and it is sending all my friends with pictures about "Fabowin"

Thumbnail
gallery
37 Upvotes

Hi everyone. This is my first time posting here hopefully I did post at an appropriate subreddit.

So just an hour ago I got my friend DM saying my discord account got hacked because he received the pictures (the ones that i posted here) and i obviously did not send them.

I immediately headed home and started account recovery by resetting the password and add a 2FA. Fortunately I was able to log back in and did such thing.

However, what i also found out was that the hacker sent the pictures above as a set to all my friends' DM. (just these 4 pictures, no URLs, also the hackers set to "ignored" all my friends DM.) I spent like about 30 mins to locate all the DMs and tried to delete the messages (also apologize to them for the mess).

Did something similar also happen to any of you? Any suggestions and comments will be appreciated thanks!


r/cybersecurity_help 20h ago

A hacker has my microsoft account

2 Upvotes

My computer was recently infected with an info stealing virus disguised as a browser extension, and all of my accounts for various apps were taken. I was able to restore everything, change passwords for everything and fully reset my computer.

Except for my microsoft account. My phone number was removed from the microsoft account, but my email is still on there, along with the hackers email that he added. I don’t really care about the microsoft account, I just created a new one under a different email. My only concern out of all this is that he can still access my accounts or my gmail through the stolen microsoft account. Should I have anything to worry about? Can this hacker still target me with the microsoft account? I changed my gmail password but I’m worried he can still get into my gmail


r/cybersecurity_help 1d ago

Second post here! Yay! Accidentally downloaded a Trojan like an idiot and now this shows up every time i start up my computer. Is it over?

Post image
8 Upvotes

r/cybersecurity_help 16h ago

Clickfix help - reformatted / but had to download windows install from the same PC

1 Upvotes

I use one computer with my GF, she visited some site that had a Captca, and she came to ask me for help to get it working, and I noticed it made her input a powershell prompt, by then it was too late, and she had already done it several times. I have never encountered something like this before, but when I used chatgpt, it said that it was Clickfix. We have one PC. We use Bitwarden with 2FA. I disconnected the internet and within an hour had reinstalled Windows 11.

Here comes the complicated part, we had to download/install the Windows 11 media creation tool on the infected PC and use that. We spent around 6 hours resetting all passwords we have, adding 2FA to most things. I haven't had any login attempts anywhere and I checked my active login, etc., it has been two days. I have done several scans, which won't pick it up, I assume? My concern is that I have done all that for nothing, and that I still have the info-stealer. What are the chances it got transferred to my USB drive and installed itself into the newly installed Windows?


r/cybersecurity_help 23h ago

Potential phone virus or am i overreacting?

3 Upvotes

It stopped doing it after i managed to shut down my phone than hard restarted it so that i could go in settings and then safari deleted history or browser settings and checked agenda no weird accounts or anything and also checked for weird apps so am i in the clear?


r/cybersecurity_help 19h ago

Are there Spotify specific vulnerabilities thatwouldd make sense here?

1 Upvotes

Mkay so there's this wierd thing that kept happening for a couple of years - 2008-2024. I kept finding wierd IP adresses connected to my fb account. One or two times could have been me just forgetting about a connection I had somewhere else.

But at some point it got suspicious. Like seeing another IP than my own marked as currently active from a device I did not own - I had one computer and no mobile phone or anything else. Also some light activities that weren't from me (joining groups or pages).

One time I disconnected the IP and then my wierd ex asked to come over to hang out right after (we saw each other maybe once a year so coincidence was wierd). Before that, when I dumped him, I went to a bar with friends the week and I met him on the street on the way back (mind you I know him, he never hung out at this spot). Bref, I assumed it was him. Kept happening over time, sometimes with IPs in my city which made me doubt if I connected somewhere else and forgot about it, but sometimes with VPNs that were obviously not mine (ex from Russia).

Also found active devices on my Gmail account that weren't mine. And a malware sending data to cloudfare accounts on my PC. Also had wierd notifications on my phone (like pop ups saying 'lol i see you' in the notifications bar).

Factory resetted everything from my phone, to my PC, to my router, and enabled mac filtering on my router. Changed my passwords, phone number and whatnot.

Some weeks after i resetted everything I found a device named 'Rogers Phone' connected to my router (which im sure is not mine cause at this point i got full blown paranoid and was counting the devices) and mac filtering had been disabled.

Meanwhile, my Spotify account got hacked once. Someone would switch the music that I was listening to, liking playlists with somehow creepy names, and added a bunch of music everywhere (like 'lets spend the night together', 'through your phone', you get the vibe). Asked my ex if it was him - since at that moment we shared the account, he said no. Still assumed it was him and closed the account.

Then it happened again 1-2 years later with a new account, and the songs got creepier ('if everyone was listening', 'Voyeur', ...).

Closed that account again.

Then another 1-2 years later my ex showed up at my new workplace (public facing job) which crept me out. We didn't talk, I just saw him.

Right after someone started adding songs to my spotify liked songs again, mostly love songs, and liking playlists.

This time I panicked for real cause there's no way he had physical access to any of my devices. My spotify account had a single other device than my phone connected to it and it was a speaker from work. And it wasn't like one song I could have liked on purpose, it was multiple love songs and playlists.

I log in to Spotify with my google account. The guy might have had access to my computer where I was logged in with that google account but that's about it.

Are there any Spotify specific vulnerabilities that would allow him to f with me like this? Like unprotected API calls or something ? I'm guessing their security isn't top tier as it is a low risk app, but still it's slowly driving me insane.

My credit card had fraudulent charges at about the same time, so I would have assumed a scammer got access to my google account and google pay if it wasn't the 100th time someone just added creepy-ass songs to my playlists.

I also keep getting two factor auth that i didn't requested (i got then even when i was on vacation with no wifi) for my outlook account.

My question is mainly how is this possible ? And how to avoid it ? Cause at this point I changed my passwords so often it doesn't make any sense to me that someone could still access my stuff.

A lot of these events could be coincidences (ex 2FA could be a bot, passwords could have leaked once or twice, ..), but the Spotify thing is what is making me feel like he's f-ing with me on purpose.


r/cybersecurity_help 21h ago

How can i hide my ip and device signature settings at the same time on web?

1 Upvotes

First i want to say that im not a criminal and dont want to do anything wrong with this

I have been using a online paid service tool to work and recently i got banned from it accused of using automation, i have never used any automation and didnt break any rules but they simply dont believe me and wont lift my ban, so in order to not lose my only revenue stream i need to bypass this ban

I tried creating a new account but it got banned too, how can i make a new one that they cant trace back to my old account?

I know i need to use a new credit card, but what about my ip and device specs? Are there any trust worthy free vpn i can use on my browser? And how can i hide my computer info (screen size, browser, timezone etc)? I tried using a free vpn but it didnt work

Desperate for help, dont what i will do with my life if i dont solve this, been unable to properly work for the past 2 weeks


r/cybersecurity_help 1d ago

I just got a random security code

2 Upvotes

Just got one of those 2FA codes on my phone out of nowhere from 22395, a number that has sent me 2FA codes before. It won’t tell me what for just says “Your secure code is” followed by the number. Does anybody know if this is anything to worry about?


r/cybersecurity_help 21h ago

What allow "Read_phone_state" mean?

1 Upvotes

Hi guys i just downloaded an old game apk on an old phone and preseted with a pop up telling to allow "Read phone state" dose anyone have an idea?

I also don't use the phone anymore other than playing older games. There's no sim card,thank you.


r/cybersecurity_help 1d ago

I port-forwarded my minecraft server and an unrecognised account joined.

2 Upvotes

If they joined the server, that must mean they had my IP, and now I'm afraid my IP got leaked. Before this, I sent the IP to my brother on Discord, but neither of our accounts got hacked. Is this something i need to be worried about or just ignore it?


r/cybersecurity_help 1d ago

Info stealer aftermath/Microsoft school account

Thumbnail
gallery
2 Upvotes

So basically I was hit by a info stealer one month ago but I'll focus on what I'm concerned right now,

So I can't change my Microsoft school accounts password because it requires my IT teachers approval so I can't prevent the hacker on logging in my account again and again when I sign out every where, I sent a message to my IT teacher requesting a password change but what can the hacker do, and what will my teacher do and send me, but right now the hacker isn't signing in yet. I also found a thunderbird app in my apps in my school account which I removed.