21-11-2021, 08:23 PM
I had a client last week with a facebook account they could not get access into for no apparent reason.
Said invalid email, but was always the one they used.
Turns out the account was hacked and being used for SPAM.
I managed to reset the password only through clicking on the link in the email that said the accounts email address had been changed and went through the usual "secure my account" procedure and reset the password and remove the hackers email and add back the original email account, phone number, etc.
The account had a fairly secure password and this password was not used on any other online accounts they had.
Anyway a few hours later that same day I get another call from them saying the email was invalid again.
Turns out the same hackers email was back on the account again and their email removed.
Went back through the same procedure, i have no idea how the account got hacked a second time, but im wondering if it sent the hacker the same notification email saying that the address was changed that let them revert the changes?
Anyway, this time I enabled 2FA, I could not find any malware on their devices which was only a macbook and an android phone.
Really bizarre, ive seen the odd hacked facebook account, but never seen one get compromised twice before.
Said invalid email, but was always the one they used.
Turns out the account was hacked and being used for SPAM.
I managed to reset the password only through clicking on the link in the email that said the accounts email address had been changed and went through the usual "secure my account" procedure and reset the password and remove the hackers email and add back the original email account, phone number, etc.
The account had a fairly secure password and this password was not used on any other online accounts they had.
Anyway a few hours later that same day I get another call from them saying the email was invalid again.
Turns out the same hackers email was back on the account again and their email removed.
Went back through the same procedure, i have no idea how the account got hacked a second time, but im wondering if it sent the hacker the same notification email saying that the address was changed that let them revert the changes?
Anyway, this time I enabled 2FA, I could not find any malware on their devices which was only a macbook and an android phone.
Really bizarre, ive seen the odd hacked facebook account, but never seen one get compromised twice before.