So... my personal cell phone was recently hacked and I would like some help and tips on how to proceed...Some individual I don't know discovered my Google account passwords and thus gained access to my cell phone. Somehow he remotely installed malware where he had access to my camera, microphone and could see what I was doing on my screen.When I found out, I changed the passwords and formatted the phone, but somehow he managed to gain access to the phone.Anyway, I sent my cell phone away and bought a new one, but I put some of my accounts (such as my Google account and bank account) on my mother's cell phone, and I'm afraid that it is also hacked.Any tips on how to scan or examine the phone? I have already taken police action, but I want to put a definitive end to this.Thank you in advance for any help.
Bump.
>>103527210M8 you need to back up everything important the phone and the account and delete the account then make a new one, and possibly do the same for accounts you have on any other apps. Don't change passwords but just get everything off there onto a computer or some other local storage device then delete fucking everything, don't be signed into that account on anything
>>103527210step 1 factory resetstep 2 use phone normallydo not login to your phone with a google account, that's where the malware comes from
>>103527354>back up everything important the phone and the accounteverything important FROM the phone and account.* So anything your phone or account gives you access to that you can't afford to lose, get it the fuck off there and somewhere safe then torch it all and start anew
>>103527210give it back tyrone
>>103527354In my situation, I believe that backup would not work, as it would be infected. On another imageboard, they said that I could have been attacked by a rootkit.I believe my network is hacked.I noticed strange things both on my cell phone and on my family members' cell phones.>>103527372I've already done this, but the mf always come back.
>>103527494Because you're logging in with your google account.
>>103527494>In my situation, I believe that backup would not work, as it would be infectedBy back up I mean literally go through all the individual things you need to preserve like photos/videos, email addresses etc and store them somewhere safe. Yeah it's tedious but it's the only safe option. As you said a full backup is still associated with your compromised account which is why you need to separate all your sensitive stuff from it one by one.
>>103527504No i ain't. I got a new cell phone, and I only had to connect it to my network and it has been acting strange too, including being slow and heating up, and it's only been a few days since I bought it from an official store.I added a new account, created from scratch and not linked to the others infected account, I also bought another SIM card.It was only when I connected the cell phone to my network that the strange things returned.
Ah, sweet, an actual schizo thread.>he remotely installed malware where he had access to my camera, microphone and could see what I was doing on my screen.And what did the hacker do besides spying on you?Also, how did you find out he is watching you?
>>103527560I've already done it, my friend. But it looks like my network has been hacked. I dunno actually, i came here for tips and info.>>103527801>Ah, sweet, an actual schizo thread.I am not. If it were and I was lying, I would be ARRESTED FOR PROVIDING FALSE INFORMATION TO THE POLICE, but I'm not. My police report is registered at the police station here.>And what did the hacker do besides spying on you?That's the problem, I don't know.>Also, how did you find out he is watching you?I can't say much, but I will say between the lines that I was talking about many of the things I commented on, both on my cell phone and on messaging apps, I received, so to speak, strange messages, among other things.Also, I will just copy paste what i wrote explaining better on another imageboard:"So, let's explain this correctly.Someone hacked my account after discovering my password for my Google account (it was a weak password, an old phone number).In my country, it is easy to get and retrieve someone's data, such as number, address, etc., as there is a lot of data leakage due to the government's incompetence.In this hacked account, there were passwords saved for several other accounts, including the account for an iPhone of mine, which I fear was hacked as well.Anyway, I got rid of my android and my iPhone, and bought another cell phone, in the meantime when I was without a cell phone, I used my mother's cell phone to enter my accounts, with the passwords already changed, but I'm afraid that the backup was infected.I had formatted my cell phone before and added new accounts, but it still had the same problem.So did this person hack the Android device that we use as a hotspot? I don't know, I would like to know what the malware is, and preferably, I can have proof of the activity to take to the police."
>>103527372If you xploit to gain root access you can just install shit to system, that part isn't erased when you format a phone, it only deletes the usarland partition.OP would need to flash a new firmware, even if its the same version to overwrite the system partition.
>Not using MFAYou deserve it, if you use a simple password shared between accounts its easy as fuck to guess if another unrelated site to google get hacked.
>redditspacer story>retard decisions at every step>most like fake to farm for (You)sThis site is dead.
>>103527995Not op, but everything he said is doable.If the moron didn't had 2fa enabled, anyone with the password/cookie can log on in a browser, tell play store to install any app on one of your devices, that app is the first step of an xploit and if you write to the system partition everything stays there even if you reformat.I guess there isn't triple digits iq anons on /g/ anymore.
>>103527937Yes, I'm afraid this is the problem.>>103527995Yes, it was stupid of me. We generally don't expect it to happen to us.It's real. And my text has a weird format because I'm using Google Translate to communicate. English is not my mother tongue.
>>103528009If someone's accounts got hacked and they believed a hacker was watching them through the camera and accessing their accounts do you really think they would put their own mother in the crosshairs by transferring those same accounts to her phone? It's not about things being possible, it's about the likelihood of any particular claims made on /g/ being true. Every day some random anons figure about what 'technically possible' in related to tech and then they make schizos threads about it.
>I am not. If it were and I was lying, I would be ARRESTED FOR PROVIDING FALSE INFORMATION TO THE POLICE, but I'm not. My police report is registered at the police station here.Because the cyber experts at the police would easily be able to verify your claims. And would definitely care to arrest you if they couldn't find any proof of your phone being hacked>That's the problem, I don't know.Hmm... I mean, that's not too unlikely. But still strange.>I can't say much, but I will say between the lines that I was talking about many of the things I commented on, both on my cell phone and on messaging apps, I received, so to speak, strange messages, among other things.So you realized your phone is hacked because you started receiving "strange messages"? Which were related to stuff you recently talked about or commented on? But you aren't allowed to say what exactly they were about?Idk man, your story fits really well into actual schizophrenia. But real schizophrenics don't think that something might be wrong with them, they are 100 % sure everything is real.Still, it might be best for you to go see a doctor/psychotherapist. Even if it sounds ridiculous to you.
You need something like wireshark on the hotspot phone (and other compromised devices) so you can see which app is sending information to where
>>103528096The fact is that is totally possible, also anon put the account after switching out the password, nothing out of the ordinary there.Are you dense?
>>103528096I thought it was simple malware, and as you noticed, I don't understand much about technology and much less frequent this board. I just want tips on how to proceed in this situation.My phone had been hacked, so I left it off and logged in some important accounts (like my bank) on her phone, and I was stupid enough to put my Google accounts on her phone.Anyway, I want solutions and tips for doing a forensic analysis.In fact, I don't need to prove anything, even if my case for some reason was false(it's not), it would still be relevant to other people here looking for ways to improve opsec.>>103528111>Because the cyber experts at the police would easily be able to verify your claims. And would definitely care to arrest you if they couldn't find any proof of your phone being hackedThe officer accepted my complaint and he wanted evidence to take it further, I will go there Tuesday. I have a warning from Google saying when the account was hacked.>So you realized your phone is hacked because you started receiving "strange messages"? Which were related to stuff you recently talked about or commented on? But you aren't allowed to say what exactly they were about?Anon, I'm perfectly normal. I don't have schizophrenia or any other mental illness. The most I have is ADHD and it is treated. I've already been to the psychiatrist and I have nothing.I work and have a family and a relatively normal life. If I had schizophrenia, other things would show it, like confusing language or something.Anyway, my life is not the topic of the matter.I don't want to say much because I'm afraid it's still hacked, I'm just asking those involved in the thread if they can help or not.>>103528127I'll take a look. Any help is welcome.
>>103528150He's not going to fuck you dude.>>103528248I don't really read redditspacing. Stop replying to me.
>>103528312If you don't want to help, then what are you doing here faggot?. Go troll someone else.
>>103527869>I can't say much, but I will say between the lines that I was talking about many of the things I commented on, both on my cell phone and on messaging apps, I received, so to speak, strange messages, among other things.Sorry anon... You never saw any concrete proof that someone hacked it (Such as taking and using your account, blackmailing you with a picture from it's camera in a "private moment" etc.You are seeing coincidences and "between the lines" that some spam or whatever. This is called coincidences and marketing (If you talk about some product in person with an app with microphone access, like instagram, they will often pick up on the word and give you ads.)It's not schizophrenia, those people are hearing voices and seeing things and usually get medical help.I say this out of concern for you, this sounds like paranoid delusions, my uncle has those, and it ruined his life.
>>103528412I cannot give so much information as it would result in breaking my anonymity, simple as that.>This is called coincidences and marketing (If you talk about some product in person with an app with microphone access, like instagram, they will often pick up on the word and give you ads.)I know how this works, anon. I can assure you that this is not the case. I am not talking about advertisements, I am talking about other types of "suspicious messages".There are other people who have followed my case closely and know that what I am saying is the truth. Anyway, I just want help to continue this, if y'all don't want to help for whatever reason, that's fine.
>>103528482>I cannot give so much information as it would result in breaking my anonymity, simple as that.Are you a very publicly visible person, such as a politician in/running for government, internet/media celebrity, CEO, top end skilled in your field (Like jim keller), or a journalist writing about powerful people?
>>103528648Maybe i'am.
>>103528670I can tell you one thing, with access to a google account you can't install spyware.What you can do is install an app remotely from the play store, but it cannot be configured, and you still need to open it manually on the phone and give it permissions.What a hacker could do is log into a new phone with your account and restore backup, that will give them access to SMS and contacts and some other stuff if you have it backed up.This, however triggers all kinds of popups you would have seen.You can see some basic stuff about what you are doing on the phone, and of course browsing history if you use google chrome with sync and so on...In all these cases you should see it as a logged in device on googles security console.
>>103527210Hello pervert.
Report to police.
>>103528700Anon, I know the things I saw, and I know what I'm talking about. I know it's not all in my head because a friend of mine followed everything closely and confirmed many of the things I saw.>You can see some basic stuff about what you are doing on the phone, and of course browsing history if you use google chrome with sync and so on...Yeah, i know about that.>In all these cases you should see it as a logged in device on googles security console.Well then, there were. I'll look for the images here on my computer.>>103528739Kys.>>103528767I've already done this, and I even have the evidence printed out here with me along with the police report. I went to a police station, and the officer told me to go to a police station that specializes in cybercrimes.If my case goes ahead, I will post updates here for y'all.
>>103527210You are a retard.
>>103529373Yeah, i agree with that. Anyway, bump.
>>103529520get help. And I don't mean from the police.
>>103529553But the police are already helping, look at this >>103529267
>>103527210Welcome to getting "gangstalked".They have full access to your google account through an API. Same as they can access your phone through hardware backdoors. Pretty much all hardware is backdoored nowadays. Worst is SAMSUNG, but the others arent better, but on Samsung phones even custom roms wont help you, as got tested and proofed (in intelligence circles).
>>103530934Yeah, well, now tell me where to get rid of all this and how I can generate forensic evidence.
>>103530964>now tell me where to get rid of all thisYOU can't because YOU'RE the problem.Any advice we can give you would be undone by your own stupidity.Most likely scenario is you signed up to some shit site in the past with your gmail account, THAT site gets pwned and your dumbass used the same password you use for everything which is how the "hacker" is able to install shit "remotely" (Google settings to keep all apps synced and installed accross all "devices").Go here and enter your gmail: https://haveibeenpwned.com/It will tell you where your email has been leaked.
Jamal, stealing a phone is one of the negroist things you can do. At this point you may as well break into cars and steal cd players.I would say give it back but based on statistics about your racial iq I'd guess you'd even manage to fuck that up.Goto the nearest police station and hand yourself and the phone in. At least you can rely on a regular meal for the next few months.
>>103527869>I am not. If it were and I was lying, I would be ARRESTED FOR PROVIDING FALSE INFORMATION TO THE POLICE, but I'm not. My police report is registered at the police station here.schizos don't lie, they fully believe their delusions.Also the cops don't know shit about cyber security. Even if they didn't believe you, they'd rather take ur report than to argue with you about being schizo."Strange messages" don't mean you're hacked, you're just delusional and lacking common technological knowledge.Are you grasping for control in your life? Has there something stressing u a lot lately?
>>103533248I know this site, and my account that was hacked doesn't appear there (only another one).Here in my country, data is treated like nothing, there are always leaks. I used an old phone number as a password, that's how he gained access.>>103534420>>103535775Kys.
>>103536210Your description of this hack fits the generic schizo delusion.1. Something unlikely like a phone hacked: phones are far away from being hacked just for fun or access to a stupid google account. Maybe if you are edward snowden..2. Weird messages, hackers contacting victim:If you are a victim, most hackers do NOT contact you, as it most of the time it causes the victim to reset their device.3. being spied on:NO ONE CARES WHAT YOU DO ON UR PHONE, your life is boring. Me and you, we are just mall pieces of dust in some big pile of shit laying on the street.4. Either lacks technical knowledge or just has superficial knowledge and is missing a lot of depth, so they jump to slightly logical conclusions.
>>103536210>only another oneYou DO realize the leaks also include phone numbers, passwords, and IP addresses.>I used an old phone number as a password, that's how he gained access.That's just what you assume, otherwise changing your password would have ended the "hacking"There's lots of holes in your security that you don't even realize are areas of entry because you simply don't know what can be used as an entry point unless someone smarter than you was in you shoes.I once got my steam account hacked due to a leak but was able to trace back who it was within a day along with other accounts the "hacker" used and gifted myself some games from the "hacker's" main account since it was the only account receiving things from all the other accounts.And this was back when I was dumb enough to use the same password for everything and didn't set recovery emails.Point being you're not smart enough to even give us the information we need to find the leak in your situation.The simplest things to check would be 2-factor authentication options and recovery emails for ALL you accounts. But you seem to be a dumb phone poster as you don't even mention having a computer or even if you access to the Wi-Fi router.
>>103535775>Also the cops don't know shit about cyber security.Also, I don't need the police to move forward with my case, I need the police to protect me legally, and that's it.The rest is up to me.
>>103536267Brother in Christ, these are not necessarily messages, but I can't describe them to you without sounding crazy.>>103536279>You DO realize the leaks also include phone numbers, passwords, and IP addresses.Yeah, i do.This is how he accessed mine:Here in my country, data is always leaked, so there are bots on Telegram that you can use, just enter the person's name and you can find information such as address, phone numbers and other personal information.One of my Google accounts had an old phone number, he kept throwing my details into the password until he got it right, and that was it.That account hacking notification had appeared, but I only saw it after a few days, and the cell phone then started acting strange, like the battery dying very quickly and it becoming slow and getting hot.I changed the passwords, and after a while, I formatted it. The main problem is that this Google account had other passwords for other Google accounts, including accounts belonging to some family members.I decided to discard my cell phone and so I put some of my main accounts on my mother's cell phone, I had already changed the passwords, but then it also started acting strangely.Here at home we also use something called a "TVbox", it is an Android device that is used to watch streaming channels and other things. We used it as a hotspot too, and it started acting strangely (signal dropping, restarting itself and other things).If you want, I can give more details too.>There's lots of holes in your security that you don't even realize are areas of entry because you simply don't know what can be used as an entry point unless someone smarter than you was in you shoes.My brother in Christ, I KNOW THIS, and that's why I'm here, I want to find out what hole he's getting himself into.I know a little about computing, I've even made some scripts and programs, but I don't know much about cybersecurity.
>>103536279>The simplest things to check would be 2-factor authentication options and recovery emails for ALL you accounts. But you seem to be a dumb phone poster as you don't even mention having a computer or even if you access to the Wi-Fi router.I already use 2FA on all my main accounts, but even so, I feel like the devices are still hacked.Some anons here gave very good suggestions.
>>103536210>Here in my country, data is treated like nothing, there are always leaks.So jeet or chink that too fussed about social credit. Or maybe 3rd world shithole eastern european?Either way>>103536373>One of my Google accounts had an old phone number, he kept throwing my details into the password until he got it right, and that was it.You had a very weak or very obvious password. You got what you deserved.>My brother in Christ,ahhhh, makes a bit of sense now.Maybe rather than trying to use this place as your own personal helpdesk you should go to google. UNLESS you're lying to us and can prove your id they have processes in place for exactly this sort of thing.I would say godspeed and gud hunting but as stated.YOU GOT WHAT YOU DESERVE. I hope he fucks you over royally.
>>103536457Yeah, whatever. Thanks for the bump, anyway.
>>103536504Sure>options:"sage";always
>>103536373>>103536400>but I don't know much about cybersecurity.>I changed the passwords, and after a while, I formatted it. The main problem is that this Google account had other passwords for other Google accounts, including accounts belonging to some family members.>Here at home we also use something called a "TVbox", it is an Android device that is used to watch streaming channels and other things.>weIt's less about the technical end of cyber security and more about the human end.For example, months ago there was someone in a similar situation who didn't realize that allowing his kid to run cracked games on his computer is what led to his shit getting hacked because he couldn't connect the dots between the "free" games his son played and the keyloggers he "keeps finding"And what ever country you're in doesn't matter when it comes to YOUR cyber security since Google and Apple are everywhere.So unless you're willing to list every site and service you've ever subscribed to along with the email addresses and phone number you use, then there is no way we can tell what you could be doing that is leaking your info.This is all information you already possess but lack the ability to self-audit.This cannot be taught to you. You have to learn it via experience or intuition.You're basically responsible for enabling this problem in the first place for sharing an internet capable device.
>>103536510Your sage; my bump.
>but I put some of my accounts (such as my Google account and bank account) on my mother's cell phone, and I'm afraid that it is also hacked.>I noticed strange things both on my cell phone and on my family members' cell phones.>The main problem is that this Google account had other passwords for other Google accounts, including accounts belonging to some family members.You genuinely do deserve everything you get. I hope your family don't get fucked over but I do hope they know it's you who caused this breach and hold it against you.>>103536534newfaggot.
>>103536528>So unless you're willing to list every site and service you've ever subscribed to along with the email addresses and phone number you use, then there is no way we can tell what you could be doing that is leaking your info.This is all information you already possess but lack the ability to self-audit.This cannot be taught to you. You have to learn it via experience or intuition.I get it, I came here for you to give me tips on how to proceed with this. What I can tell you is that I am the vector of all of this.Can you at least mention some tool that could help me? An anon talked about wireshark.>You're basically responsible for enabling this problem in the first place for sharing an internet capable device.Yeah, i know. No one expects the worst to happen to you. But anyway, that's it.
>>103536613You have an IQ at room temperature or you are simply a bad character. Imagine blaming the victim and not the criminal. I have responsibility for my safety, but it is not my fault if someone harms me.What are you still doing here?
>>103536653>>103536597Wrong quote.
>>103536613>I came here for you to give me tips on how to proceed with thisWe can't. We don't know every device connected to your network, what your network settings for each device is, who is using each device at what times to do what things.Without a complete picture, network map, and real-time monitoring there is nothing WE can do for YOU.You're only option is process of elimination.Since it's apparent you aren't going to hire someone to audit your "network" security.You don't have the intuition to do this yourself and it isn't something that can be done remotely WITHOUT giving a stranger FULL ACCESS to ALL your accounts and devices.
>>103536653>I have responsibility for my safety, but it is not my fault if someone harms me>It isn't my fault that I choose to swim in shark infested waters, it's the sharks fault for trying to eat me.
>>103536698>You're only option is process of elimination.I'm actually doing this. And my suspicion fell on my network and internet.I'm also thinking about formatting the modem and installing openWRT or DD WRT>>103536715Your analogy is stupid and lacks logic.
>>103536613>I get it, I came here for you to give me tips on how to proceed with this.We already told you. Go see a doctor about your schizophrenia/paranoia.
>>103536653At best it's a larp - at worst your acknowledged poor security has probably seriously impacted your family.This is a tech board - while you're accusing me of having a room temp iq you may want to ponder why you don't have AT LEAST 2fa on your accounts.>What are you still doing here?Do you even know where the fuck you are?
>>103536803The internet is a vast ocean filled with viruses, scams, hackers and doing nothing to protect yourself from these threats is equivalent to swimming in infested waters willingly.Your "free shows" you access on your "TV Box" is one such ocean that you allow yourself and your family to swim in without understanding the potential dangers.The average person doesn't encounter these problems, since the average person has some basic sense to allow someone smarter to operate and manage their devices and to curate what services they use.
>>103527494Question. Were you downloading/pirating shit from your computer or your phone? Perhaps there is a virus sitting in your router and uses your network to infect your devices. From what I know of, if that's the case, then you need to reset your router and do a firmware update in order to get rid of it. Worse case scenario, just buy anothet router.
>>103537033He doesn't have a computer, only Android devices
>>103527210Give it back
>>103536880Very funny. Maybe tomorrow I will laugh.>>103536890I accused you of being stupid not because you don't have knowledge in technology(I didn't even touch on this point), but because of your stupid logic of blaming the victim and not the criminal, I pointed this out above.But never mind, now I understand the analogy better.>>103536909I understand.>>103537033For a very long time, I was. But not now. I spent almost 1 year without a computer.Until then, I never saw any problems.When I see the computers, they seem to be clean (I used Sysinternals to see if there is anything suspicious, and I will check again). By process of elimination, Android devices and routers remained.I will probably flash new firmware on modems and routers and I will also put new ROMs on Androids, as stated above
>>103537127>I will probably flash new firmware on modems and routers and I will also put new ROMs on Androids, as stated aboveAnd your belief that these are actually "clean" is?One of the easiest methods to backdoor into a device is aftermarket firmware.
>>103537153Shit. But if you're going to take it that way, then almost nothing available online is safe. Although Android is an opensource project, correct?
>>103537065So, is that dude using a cellphone as a hotspot to access the Internet with other phones all the time? Thats retarded as fuck. Now Im not going to read the whole thread because it feels like bullshit, but if it's real, then OP lacks the fundamental digital security knowledge and is imagining things. I understand that because I have been in OP's position once. I guess here's what OP can do to save his skin>Reporting this incident to police is a good move as a citizen, but police won't do shit for your stolen digital info. As long as you are not missing actual money or the hackers dont harm someone irl, then they won't do shit.>Giga reset every device that you think it has been infected. Your router, your computer, your phones, everything. Upgrade your router's firmware and your pc bios to make sure you dont have any vulnerabilities.>Go to your bank and ask them to help you with a new username and password for your bank account. If you had your credit card credentials in your hacked accounts, then ask them to make you another credit card as well.>Make a new email and 2fa it. Always check if your mail has been compromised to haveIbeenpwned dot com.>Use burner emails for account making in dodgy sites>Your codes from your accounts should be complex and always have 2fa on them>Make a txt with your account codes, and put it on an encrypted zip folder, then keep it on a usb and another safe spot.>Alternatively, take a irl notebook and write your shit down. Just make sure to keep that notebook in a very safe place>Pirate your shit from knaben dot eu. It's not 100%, but it has a system that tags infected programs.
>>103537199>then almost nothing available online is safe.And now you're beginning to understand>Although Android is an opensource projectOpen source doesn't mean curated or secure. It means ANYONE can add their own code and compile and release their own version anywhere they want.
ITT:>I had really substandard security>someone leveraged that poor security to "hack" (easily access) muh data>it has impacted me and potentially my family>but it's absolutely not my fault the this has happened.>not only do I hold no blame for the situation I am also going to try to remedy it by doing pointless piecemeal shallow fixes that at best will slightly protect me moving forward>I believe in a magical skyking >and again despite the fact that my security was literally using the phone number of the device as it's password none of the consequences of using such a shitty password should fall on me because its it's not my fault.I get this is more than likely a larp and all I should have said is>Give it back Jamalbut if it isn't I stand by what I said - here's hoping your family are well aware it's you who caused this and hold you to account for it.
What information I have is:>it is an APT (advanced persistent threat)>seems to infect androids and has access to camera and microphone>the means of infection for other devices POSSIBLY works through malicious backup (the hacker had access to my mother's cell phone after I put my Google account on her phone, as I had to end mine, and her account also had the recovery email to my father's main account)>the TVBox accounts (android device) belong to my father, and we use it as a hotspot>my account had passwords for several other accounts, including the router's password as wellI also have an old iPhone that I don't use much, and the passwords(like, iCloud, etc) for it were also contained in the main account that had been hacked.Anyway, all passwords have been changed, 2FA has been enabled and I store the new passwords in a database (KeePassXC (they were created on another computer on another network)).>>103537241Thanks for the tips.
>>103537242>Open source doesn't mean curated or secureYes, but it means that at best the code can be audited to see if there is anything malicious in it. Right?>>103537274They know, but they don't understand the gravity of the situation.
>>103537310>They know, but they don't understand the gravity of the situation.Do you think that might be because you haven't made clear to them that their accounts (including possibly bank) are compromised because of you?Bet you left that bit out.
>>103527210reset all passwords remotely connected to any accounts in it and enable 2FA/MFA
>>103537446Yeah, but zero fucking gives.>>103537563I've already done this.
Bumperino.
>>103527210
what did the cyberpolice department at google say when you called them and asked for help?
>>103541579>Nigga you be trippin'
