hacked

[MassiveJim]

Do an offline scan of your drive first which scans for malware before the OS loads, MS Defender does have an option for this in the manual custom scan bit for offline scanning, it reboots then does the scan in its sandbox thing. If it can find and remove something then great but at this point maybe a fresh install is the best option but be aware that some malware does install on the drive's bootloader/MBR if I recall so a fresh install may not help until the malware is removed.

Not long ago some BIOS/UEFI were also compromised so unless you have done a BIOS update in a while then this could be something to investigate too.

Assuming I've done a clean install.
I just want to ensure the account is secure.

If I log out of all active sessions does that render any copied session cookies useless?

 

[ED209]

Assuming I've done a clean install.
I just want to ensure the account is secure.

If I log out of all active sessions does that render any copied session cookies useless?

I have not read all the replies but change the password as well if you have not already.

Doing this should boot any sessions out as the stored details would be incorrect to log back in again

 

[Mcnumpty2323]

If you've done a clean reinstall of windows
Shouldn't be any session cookies
Apart from any new ones created since
Clean reinstall of windows

If not after a clean reinstall
Log out of all active sessions yes
Clear cookies and saved passwords in Web browsers

Plus do the router things already mentioned
Whether reinstalled or not

 

[MassiveJim]

How do we know this is the real OP posting this?

You never will

I have not read all the replies but change the password as well if you have not already.

Doing this should boot any sessions out as the stored details would be incorrect to log back in again

This was the first thing I did.

Started to go through other accounts now, as I use google password manager they now have access to every account password that I have pretty much.
Really looking forward to changing all of those

just had another thought, how would I know if they have accessed my google drive ?
I've logged in to it and there are no obvious signs, the last modified file was 4th June (a file which I changed)

 

[ScoobyDoo]

I got hacked a couple of months back. It was session cookie malware that windows defender didn't pickup. My lad downloaded something dodgy I found out!
They were after all my gaming accounts, stole my Xbox account, tried steam and hacked Facebook.
Luckily I was quick and managed to stop Facebook and steam.
Microsoft were very good and recovered my Xbox account.
Fomatted and reinstalled everything. Changed passwords on all the sites and enabled 2fa on everything.
Touch wood no other damage done.
I now run some decent AV software and keep my lad off my gaming pc.

 

[mattyg]

I had a sim swap hack a couple of years ago.. Got a notification that my sim was about to be swapped and i should reboot my phone. Alarm bells rang but before i could do anything it had disconnected from the network.

Luckily I have a dual sim phone and 2 sims. So managed to log into the O2 site change password and do a sim swap back to my sim again. But in the meantime they got into my paypal account and bought some stuff from Ikea. An Ikea not far from O2...Hmm thats the 2nd time I had compromised with O2 in the space of 18 months. Luckily got everything back so no loss.

O2 Fraud team were useless. This was 100% an inside job as my account was flagged for any account changes to be confirmed and they bypassed that. So we moved from O2 Asap after that.

 

[MassiveJim]

Having thought about this I don't think the hacker has even accessed my password list because if they had they wouldn't have needed to reset any passwords to get into my accounts.
I have changed the most important passwords anyway, but after several years on the internet the password list is very long I guess about 200 passwords looking at the list.

the only accounts I can't get back are Epic and Ubisoft

however since Epic said no to my requests I have managed to log in to my epic account with my xbox account so I have raised an account recovery but with extra information this time, hopefully that works. They don't respond quickly.

Ubisoft do respond very quickly but are completely useless, I have explained the situation to them, but they just come back with cookie cutter responses every time, along the lines of I haven't provided enough information.
the hacker has obviously changed the email on the account and they have sent a confirmation code to the email on the account, I explained that won't work and they haven't offered any other solution.
not too bothered about the Ubi account as the few games I have on there I don't play apart from anno 1404 occasionally and I just bought that on steam for less than £4


every other account apart from these 2 you can click a link on an email to undo email address changes and get your email reinstated to the account to get you back in.