I've been hacked.

[splinterdream]

Last night, had loads of login requests come through my email, then the attempted sexstortian emails. Seems they've somehow got in, changes all my passwords, absolute nightmare. I've got most accounts back but am having real problems with PlayStation and X. PlayStation, no phone number, messaging they want serial number of first PlayStation account paired with, recent invoice number, date, item, card I've used to top up account. I've given them an old ps4 details, and all the other info, but they say details dont match but wont tell me whats wrong. Im having to go through this as requesting password reset i'm not receiving their emails, whats worse the hacker spent £23 on something through PayPal but I've no idea what on.

If anyone knows a fix.

 

And X is asking for some authentication code from a third party app, no idea what that is

[danny.]

44 minutes ago, splinterdream said:

Last night, had loads of login requests come through my email, then the attempted sexstortian emails. Seems they've somehow got in, changes all my passwords, absolute nightmare. I've got most accounts back but am having real problems with PlayStation and X. PlayStation, no phone number, messaging they want serial number of first PlayStation account paired with, recent invoice number, date, item, card I've used to top up account. I've given them an old ps4 details, and all the other info, but they say details dont match but wont tell me whats wrong. Im having to go through this as requesting password reset i'm not receiving their emails, whats worse the hacker spent £23 on something through PayPal but I've no idea what on.

If anyone knows a fix.

 

And X is asking for some authentication code from a third party app, no idea what that is

You will have an 2 factor authentication app like Google Authenticator, Authy, etc that generates 6 digit codes for you. Check if you have an app like that and if it has an entry for X or Twitter use that.

[jonthefox]

49 minutes ago, splinterdream said:

Last night, had loads of login requests come through my email, then the attempted sexstortian emails. Seems they've somehow got in, changes all my passwords, absolute nightmare. I've got most accounts back but am having real problems with PlayStation and X. PlayStation, no phone number, messaging they want serial number of first PlayStation account paired with, recent invoice number, date, item, card I've used to top up account. I've given them an old ps4 details, and all the other info, but they say details dont match but wont tell me whats wrong. Im having to go through this as requesting password reset i'm not receiving their emails, whats worse the hacker spent £23 on something through PayPal but I've no idea what on.

If anyone knows a fix.

 

And X is asking for some authentication code from a third party app, no idea what that is

Sorry about that. I thought i had @Raj email. 

[CornwallFox]

1 hour ago, splinterdream said:

Last night, had loads of login requests come through my email, then the attempted sexstortian emails. Seems they've somehow got in, changes all my passwords, absolute nightmare. I've got most accounts back but am having real problems with PlayStation and X. PlayStation, no phone number, messaging they want serial number of first PlayStation account paired with, recent invoice number, date, item, card I've used to top up account. I've given them an old ps4 details, and all the other info, but they say details dont match but wont tell me whats wrong. Im having to go through this as requesting password reset i'm not receiving their emails, whats worse the hacker spent £23 on something through PayPal but I've no idea what on.

If anyone knows a fix.

 

And X is asking for some authentication code from a third party app, no idea what that is

Assume you've changed all your passwords since this kicked off. I would add make your email passwords different from each other and anything else. Everything is done via email these days and if hackers get in there it can be horrendous. 

What the authenticator software? 

Most big companies have a fraud team - area you talking to PlayStation's fraud team or customer service? If the latter ask if they have the former. 

Not sure what's in PayPal's t&C's but worth asking if they refund defrauded sums. Also check with the bank it's linked to though that might be harder to win them over! 

[splinterdream]

35 minutes ago, danny. said:

You will have an 2 factor authentication app like Google Authenticator, Authy, etc that generates 6 digit codes for you. Check if you have an app like that and if it has an entry for X or Twitter use that.

Being locked out of my playstation account hurts the most. Also its incredible how difficult it is to sort these things out. For example he has changed my vinted password. Ive been able to login via Facebook. So want to change my password but they want my old password which I dont know. Thankfully that has 2 step verification

[splinterdream]

1 minute ago, CornwallFox said:

Assume you've changed all your passwords since this kicked off. I would add make your email passwords different from each other and anything else. Everything is done via email these days and if hackers get in there it can be horrendous. 

What the authenticator software? 

Most big companies have a fraud team - area you talking to PlayStation's fraud team or customer service? If the latter ask if they have the former. 

Not sure what's in PayPal's t&C's but worth asking if they refund defrauded sums. Also check with the bank it's linked to though that might be harder to win them over! 

Contact with playstation is so limited to an opened chat bar, and they are terribly unhelpful. I've given them the info they've asked for but they just keep asking for the info like a robot. 

[CornwallFox]

2 minutes ago, splinterdream said:

Contact with playstation is so limited to an opened chat bar, and they are terribly unhelpful. I've given them the info they've asked for but they just keep asking for the info like a robot. 

Don't know how legit but there's loads and loads of mentions of one phone number all over the internet 020 3538 2665

Maybe worth a try

[leicsmac]

Sony and PSN are absolutely bloody useless for things like this. I've had to try to restore access to my own account in the past and it was a nightmare. 

 

You have my sympathy, I just hope you can get access to everything restored quickly. Another argument for using 2FA as much as possible where possible. 

Edited 9 February by leicsmac

[danny.]

2FA and a password manager on everything js a must these days 

[splinterdream]

54 minutes ago, leicsmac said:

Sony and PSN are absolutely bloody useless for things like this. I've had to try to restore access to my own account in the past and it was a nightmare. 

 

You have my sympathy, I just hope you can get access to everything restored quickly. Another argument for using 2FA as much as possible where possible. 

They actually let someone get into my account, change the password, i think purchase something which came out of my PayPal account, I've no idea how this was possible, I have 1 sub which is a premium plus account due next month but this was for £22.99, I just cant get on to see what it is. Twitter still havent resolved, they've emailed me saying I have access but its a dormant account linked to Gmail.

I have no idea how I've been hacked but my teenage daughter plays on roblox alot which pops up on my network as malicious, she also has same password as the one I use on many accounts thats been hacked, a real mess

[HighPeakFox]

28 minutes ago, splinterdream said:

They actually let someone get into my account, change the password, i think purchase something which came out of my PayPal account, I've no idea how this was possible, I have 1 sub which is a premium plus account due next month but this was for £22.99, I just cant get on to see what it is. Twitter still havent resolved, they've emailed me saying I have access but its a dormant account linked to Gmail.

I have no idea how I've been hacked but my teenage daughter plays on roblox alot which pops up on my network as malicious, she also has same password as the one I use on many accounts thats been hacked, a real mess

Sadly, that maybe the cause. If and when you do get everything back, I strongly suggest you use a vpn too, as well as agreeing about 2FA and a password manager.

 

[splinterdream]

1 hour ago, HighPeakFox said:

Sadly, that maybe the cause. If and when you do get everything back, I strongly suggest you use a vpn too, as well as agreeing about 2FA and a password manager.

 

I've got express vpn but it confuses me tbh, and its stopped working on my computer 

[foxile5]

2 hours ago, HighPeakFox said:

Sadly, that maybe the cause. If and when you do get everything back, I strongly suggest you use a vpn too, as well as agreeing about 2FA and a password manager.

 

How do these password managers work. 

 

I'm very old school - for that read pen, paper, and securely hidden book - but I know password vaults etc exist; I'm open to the idea but I have literally no idea how to go about it and, ironically, don't trust that a password manager wouldn't steal my passwords.

 

[HighPeakFox]

9 hours ago, splinterdream said:

I've got express vpn but it confuses me tbh, and its stopped working on my computer 

If it has stopped working, that might be an indicator that it is unreliable, but I do not know enough to say so with confidence. I use Nord VPN, it's relatively inexpensive and very good.

 

8 hours ago, foxile5 said:

How do these password managers work. 

 

I'm very old school - for that read pen, paper, and securely hidden book - but I know password vaults etc exist; I'm open to the idea but I have literally no idea how to go about it and, ironically, don't trust that a password manager wouldn't steal my passwords.

 

The one I use requires a master password that only I know, and it led to me overhauling all my passwords - for a long time I used the same one everywhere, now it generates them for me and then remembers them, linked to whichever site it is relevant to.

 

For all I know your fear my be valid, however, so far, nothing malign has happened (as far as I know).

[splinterdream]

3 hours ago, HighPeakFox said:

If it has stopped working, that might be an indicator that it is unreliable, but I do not know enough to say so with confidence. I use Nord VPN, it's relatively inexpensive and very good.

 

The one I use requires a master password that only I know, and it led to me overhauling all my passwords - for a long time I used the same one everywhere, now it generates them for me and then remembers them, linked to whichever site it is relevant to.

 

For all I know your fear my be valid, however, so far, nothing malign has happened (as far as I know).

Whats the VPN you use?

[HighPeakFox]

2 hours ago, splinterdream said:

Whats the VPN you use?

Nord VPN, as stated above. 

 

If you were asking about the password manager, I use Bitwarden. 

[Chris_OGrady]

I got hacked a few months ago. They got into my O2 account and did a sim swap, and were then able to get into my email account. I managed to spot it fairly early which limited the damage. I've changed passwords and tried to add 2FA to stuff since. You can search in the below if your email or password has been leaked (it's not spam)

 

Have I Been Pwned: Check if your email address has been exposed in a data breach 

[HighPeakFox]

Also, change your router password and WiFi password.

[splinterdream]

17 hours ago, HighPeakFox said:

Also, change your router password and WiFi password.

Got my PlayStation account back, the telephone number in this thread, a lifesaver. Cheeky git even put his name onto my PlayStation avatar.

Deffo learning g the lesson and beefing everything up

[Tommy Fresh]

4 hours ago, splinterdream said:

Got my PlayStation account back, the telephone number in this thread, a lifesaver. Cheeky git even put his name onto my PlayStation avatar.

Deffo learning g the lesson and beefing everything up

I work in telecoms/networking, work with a number of cyber secuirty experts and one of the first things they'll show customers is a website that shows you how long it would take someone to crack a specific password

 

Something like this https://bitwarden.com/password-strength/ even if you don't want to put in an actual password, it gives you an idea of what passes for a strong password

Edited 11 February by Tommy Fresh