Post

JoCat is slow at making videos
@jocat.net

GOOD NEWS UPDATE: I have changed my 2FA to my new phone number, as well as gotten backup codes too, and changed all of my passwords. Access is back, hopefully for good this time.

JoCat is slow at making videos@jocat.net

This is my identity confirmation that it's the real me and also the explanation of how I got hacked, and how you can avoid falling into the same trap I did youtu.be/GZQcq70cc6o

youtu.beHow I got hacked on discord and how you can avoid it happening to you (I got it back now tho)YouTube video by JoCat

181 reposts1.4K likes

digiholic
@digiholic.bsky.social

And for the future if anyone else ends up getting a similar "sent a file from a trusted source that turned out to be compromised" - as soon as things are fishy, shut off the computer or pull the Internet out.

digiholic
@digiholic.bsky.social

The way the token stealers work is that they basically route whatever stuff they're doing through your computer, so it uses the saved session data and authentication from that PC. If you can shut off the computer before they can change the passwords they might not get them.

shadowbadow.bsky.social
@shadowbadow.bsky.social

Hi. I seen the update on youtube on your hacked situation. Not sure if others already told you but when this type of hacking occurs best course of action is to reinstall the windows from scratch. Those info stealers leave stuff behind that is very hard to remove.

shadowbadow.bsky.social
@shadowbadow.bsky.social

check the internet for more info and don't just take my word for it. I also had to delete my entire windows. From what I read you should in the meantime disconnect that computer from the internet. Backing up your jpeg, mp4 etc. files is fine. But windows needs purge and reinstall.

Ashy
@itsmeashy.bsky.social

I saw the video and wondered why you didn't just show your face, forgetting that's now a rather old fashioned thought to have given the technology out there now...

Sleeplessone
@sleeplessone.com

Get yourself a good password manager, and an authenticator app (Google Authenticator, Proton Authenticator) instead of tying 2FA to a phone number. Or even better a pair of hardware backed Yubikeys.

Heikki Salo
@deuzenfin.bsky.social

+1 to Proton Pass & Authenticator (although any proper software will do); SMS and email 2FA are unfortunately much easier to intercept, like a letter in transit.