Account breach! Just wanted to weigh in.

I don’t know the specifics of what was going on with that individual or the inspiration behind his topic over at the FBI, but I decided to weigh in because I dealt with something remarkably similar about a month ago. Someone managed to hijack my account under circumstances I still can't quite wrap my head around. They changed my settings and started posting absolute nonsense across the forum, all under my name. My first thought? "Great, I must have used a compromised computer with a keylogger and someone caught me slipping." I immediately swapped out my password, reverted my settings, and added a disclaimer to my signature letting everyone know those posts weren't mine. Being an IT professional, I did everything by the book to ensure my credentials wouldn't fall into the wrong hands—I only ever logged in from my own laptop and even used a virtual keyboard to be safe. Yet, two days later, it happened again. So, I went a step further and changed both my password and my email address (switching from Yahoo to Gmail). I reached out to the site admins, but they wouldn't disclose the IP address of the unauthorized login. I get their stance, honestly, but I just wanted to run a traceroute to see if this person was actually local to me. Anyway, it hasn't happened since. As for how it happened, I'm still in the dark. It was either a direct breach of the forum's SQL database or, more likely, someone managed to break into the email account I used for registration...

I'm sharing this just to point out that these things really do happen. I want the admins to stay vigilant with those IP logs, and I want everyone else to be a bit more cautious. If anyone else here has dealt with something similar, feel free to speak up. Best regards!

fadedmarlin402 said:.................Since I work in IT,

🤣
🤣
🤣

What kind of job is that?

Jose Barrett said:🤣
🤣
🤣

What kind of profession is that even supposed to be?

Who the hell do you think you are, making comments like that?

fadedmarlin402 said:Given my background as an IT professional,

🤣

An actual IT professional wouldn't be coming to a forum to ask how to handle a situation like this. A virtual keyboard isn't going to solve your problems. Your first step should be looking at the people living under your roof. Is it a brother? A sister? If you don't have any siblings around, then just wipe Windows and reinstall everything, because there might be a keylogger embedded in a game. If even that doesn't work, change every single one of your passwords and email credentials—though you mentioned you already did that. But what was the point of doing that on the same computer where a keylogger could simply record those new changes?

silentsailor5 said:🤣

An IT professional wouldn't be asking a forum how to handle a situation like this. A virtual keyboard isn't going to help you at all. First, check with the people living in your house. A brother? A sister? If you don't have any siblings, then just wipe Windows because there might be some keylogger embedded in a game, then reinstall everything. If even that doesn't work, change every single password and email login—though you said you already did that. What was the point of doing it on that same computer if a keylogger was active?

I honestly have no idea where you people are seeing that I am looking for help or that I failed to solve the issue. I truly don't see it, gentlemen. I resolved the problem using the most professional methods possible, and I know exactly what I did. I know I didn't have a keylogger. I understand the mechanics of how keyloggers function because I used to write them myself back in the day. I also know exactly what a virtual keyboard is for. It wasn't my family; I am the only one with access to my computer. I have the highest level of security available, and I know that nobody could have gotten my password through any fault of mine—it happened due to network vulnerabilities, the forum, or Yahoo. And don't try to make a fool out of me. I simply stated the problem I encountered and how I dealt with it. Please, either read the text more carefully or go buy some reading glasses if you're blind, rather than pulling two sentences out of context and forcing a logical connection between them regardless of the rest of the text. Understood? Nice. Goodbye.

Please, do share with us what you consider the most effective method and which form of high-quality protection you would recommend, so that if I ever find myself in such a situation tomorrow, I will know exactly how to proceed.😉

It works like this: a group develops a keylogger—or any other malware or Trojan—and deploys it. It’s a cat-and-mouse game where they use it until antivirus software or specialized security programs eventually flag and neutralize the threat. There is always that window of vulnerability before the detection catches up. Still, I find it somewhat absurd to think someone would go through all that effort just to mess with your account on a site like Reddit...