malware test Thread

[GreensvilleJay]

just a post as requested to see if my login info gets hacked again.......

 

[85Hokie]

just a post as requested to see if my login info gets hacked again.......

Wow - hacked? Explain what happened.

 

[North Idaho Wolfman]

Wow - hacked? Explain what happened.

We are not sure exactly what happens, but this is not the first member to get stung by it.
Reporting posts is a great way to catch and mitigate its effects.

 

[Mark_BX25D]

Most likely way to get your login credentials stolen is via malware on your own computer. Intercepting that kind of info is really pretty difficult otherwise.

Not that it can't be, but it's not the kind of thing you are likely going to see on a low value target like a random citizen or an innocuous forum.

 

[TheOldHokie]

Most likely way to get your login credentials stolen is via malware on your own computer.

Or from a compromised server.

Dan

 

[GreensvilleJay]

FWIW , I run AVAST ONE on this Win10 machine, even a 'deep scan' afterwards , didn't find anything.....
It'd be nice to know the 'how and where' this happened.. my PC, the OTT server, ??

 

[TheOldHokie]

FWIW , I run AVAST ONE on this Win10 machine, even a 'deep scan' afterwards , didn't find anything.....
It'd be nice to know the 'how and where' this happened.. my PC, the OTT server, ??

In the last 20 years I have had 3 passwords compromised - the last within the last few months. I believe all of the compromises happened outside my personal devices. Does your hacked password show up in any of the compromised credentials lists?

Dan

 

[John T]

I've been using Malwarebytes on both my laptops.... I have NOT had any issues.
it does catch and block websites and other bad stuff.

it's not that expensive and well worth it in my opinion.


PS: you can also download the FREE version, but it doesn't protect as well.

LINK:

Malware protection. Better than Antivirus | Malwarebytes

Malwarebytes protects you against malware, ransomware, malicious websites, and other advanced online threats on Windows, Mac, Android, and Chromebook

try.malwarebytes.com

 

[GreensvilleJay]

just downloaded malwarebytes... 312,000+ files checked ...ZERO problems....

 

[TheOldHokie]

I've been using Malwarebytes on both my laptops.... I have NOT had any issues.
it does catch and block websites and other bad stuff.

it's not that expensive and well worth it in my opinion.


PS: you can also download the FREE version, but it doesn't protect as well.

LINK:

Malware protection. Better than Antivirus | Malwarebytes

Malwarebytes protects you against malware, ransomware, malicious websites, and other advanced online threats on Windows, Mac, Android, and Chromebook

try.malwarebytes.com

just downloaded malwarebytes... 312,000+ files checked ...ZERO problems....

Imagine my surprise.

Dan

 

[Mark_BX25D]

Or from a compromised server.

That can certainly happen, but that exposes more than just one user's password. It gets known.

 

[TheOldHokie]

That can certainly happen, but that exposes more than just one user's password. It gets known.

Data breaches

The easiest and most common way that hackers get passwords is from data breaches, in which huge amounts of user data has already been leaked or stolen from companies. This data, which often includes usernames and passwords, is compiled into databases and may be sold on the dark web or downloaded freely on forums.

Thanks to the fact that many people reuse their passwords, attackers can use stolen passwords from one company’s data breach to steal accounts at other companies, even if they have stronger security.

Industry estimates vary but a good guess is roughly 65% of data breaches go undiscovered. Probably the second most prevalent password theft is by some form of phishing or bogus web site login. People really are easily fooled and may never know it - just ask Kevin Mitnick.

Dan

 

[Mark_BX25D]

Data breaches

The easiest and most common way that hackers get passwords is from data breaches, in which huge amounts of user data has already been leaked or stolen from companies.

In this case, there is only one server involved - OTT. If it had been hacked, there would be more than one person having this problem.

It's also a target of very low value. In fact, it's close to zero value. It's really only usable as a spamming platform, and really not very good for that.

Occam's Razor is a useful thing.

 

[North Idaho Wolfman]

I best guess on what has happened is that a user visits a site outside of OTT that attaches to the OTT login somehow as the posts are in a thread and not an original thread.

 

[TheOldHokie]

Seems drack is a fan of orange crypto.

Dan

 

[bmblank]

I would buy some Kubotacoin. (Not really)

 

[North Idaho Wolfman]

Oh no, this better not get out of hand!

 

[TheOldHokie]

Oh no, this better not get out of hand!

Looks like its already grown two fingers.

Dan