- My Forums
- Tiger Rant
- LSU Recruiting
- SEC Rant
- Saints Talk
- Pelicans Talk
- More Sports Board
- Fantasy Sports
- Golf Board
- Soccer Board
- O-T Lounge
- Tech Board
- Home/Garden Board
- Outdoor Board
- Health/Fitness Board
- Movie/TV Board
- Book Board
- Music Board
- Political Talk
- Money Talk
- Fark Board
- Gaming Board
- Travel Board
- Food/Drink Board
- Ticket Exchange
- TD Help Board
Customize My Forums- View All Forums
- Show Left Links
- Topic Sort Options
- Trending Topics
- Recent Topics
- Active Topics
Started By
Message
Email hacked solutions
Posted on 7/1/26 at 8:46 am
Posted on 7/1/26 at 8:46 am
Friends email hacked. Yes they clicked a link, in their defense it was pretty clever.
Regardless, Got email all changed back with sending in photo id etc, 2 factor auth set up then they just changed it all again. Its tug o war of constantly changing the password, 2 factor and recovery email.
Do we wipe the device and start over?
How are they able to keep doing this? Are they in the device?
Regardless, Got email all changed back with sending in photo id etc, 2 factor auth set up then they just changed it all again. Its tug o war of constantly changing the password, 2 factor and recovery email.
Do we wipe the device and start over?
How are they able to keep doing this? Are they in the device?
5
Posted on 7/1/26 at 8:50 am to rattlebucket
Does your friend have a good backup?
Posted on 7/1/26 at 8:56 am to Cimarron
She says no. I want to get in the device but not sure I have that access being I would get to see all her info. Just trying to point her in a starting direction since she was able to do enough to change it back.
Should she do a back up now and then wipe it or should she just let them have the email account at this point and create a new one? Just sucks for her because its tied to her banking, private small business etc
Should she do a back up now and then wipe it or should she just let them have the email account at this point and create a new one? Just sucks for her because its tied to her banking, private small business etc
Posted on 7/1/26 at 9:03 am to rattlebucket
My guess is that when they clicked the link they installed a program that sends screenshots to the hacker.
What kind of phone/device is it?
The first thing she should do is put the phone in offline mode, disconnect any wifi, etc, and check permissions. People tend to grant access to everything. It sucks, but she needs to go through her phone with a fine tooth comb.
If it's auto-backed up to the cloud she needs to make sure there aren't suspicious apps/contacts there too.
What kind of phone/device is it?
The first thing she should do is put the phone in offline mode, disconnect any wifi, etc, and check permissions. People tend to grant access to everything. It sucks, but she needs to go through her phone with a fine tooth comb.
If it's auto-backed up to the cloud she needs to make sure there aren't suspicious apps/contacts there too.
This post was edited on 7/1/26 at 9:08 am
Posted on 7/1/26 at 9:18 am to Ricardo
^^^^^^
Good advice.
This sounds like a wipe and restore to factory mode.
It it's a laptop, make sure you have a good DNS tool that will check all links you click on. Open DNS has long been the defacto standard in that area. The Cisco version isn't available to consumers (Cisco owns it now), but there is a consumer version for consumers.
Good advice.
This sounds like a wipe and restore to factory mode.
It it's a laptop, make sure you have a good DNS tool that will check all links you click on. Open DNS has long been the defacto standard in that area. The Cisco version isn't available to consumers (Cisco owns it now), but there is a consumer version for consumers.
Posted on 7/1/26 at 9:36 am to Cimarron
The factory wipe is looking more like what she’ll need to do. Just learned she clicked on the link on apple laptop too.
She was able to reset pswrd, add 2FA, recovery email etc and they reversed all that. Theres got to be an active session still somewhere right?
She was able to reset pswrd, add 2FA, recovery email etc and they reversed all that. Theres got to be an active session still somewhere right?
Posted on 7/1/26 at 9:56 am to rattlebucket
(no message)
This post was edited on 7/21/26 at 2:05 pm
Posted on 7/1/26 at 11:12 am to rattlebucket
A factory reset should solve it, but if they loaded the payload on her laptop and she uses iCloud, they'll still be in both devices.
I'm a network guy. Someone with more desktop knowledge might be of more help.
I'm a network guy. Someone with more desktop knowledge might be of more help.
Posted on 7/1/26 at 11:59 am to Cimarron
Can also check contacts in icloud and sort by date added. She may have a new one that she doesn't recognize.
Basically, she needs to go over everything and delete anything that looks suspicious. Any "shared" logins, etc.
Basically, she needs to go over everything and delete anything that looks suspicious. Any "shared" logins, etc.
Posted on 7/2/26 at 7:43 am to rattlebucket
if it's an updated iphone, it's fine.
Otherwise, who knows, wipe or throw it a way and buy an iphone.
Otherwise, who knows, wipe or throw it a way and buy an iphone.
Posted on 7/2/26 at 4:01 pm to rattlebucket
It sounds like the attacker doesn't need the password anymore they just steal the login token or session cookies. They could have installed a malicious browser extension, installed a remote access tool on the computer, and infected the computer with info-stealing malware.
Posted on 7/5/26 at 8:30 am to Breauxsif
Does Malwarebytes still work and pick up this type bug?
Page 1 of 1
Popular
Back to top
Follow TigerDroppings for LSU Football News