my MFC account was hacked!!!!

[cptnobvus]

my MFC account (username = cptnobvus) was hacked yesterday 8/18/2011 between around 5:30 to 6:30pm. I was watching the hacker tipping in a room while i was explaining to the model that my account was hacked because the MFC model was engaged in a private message to the hacker. I logged on and immediately received bunch of PMs from this model (Emprus69) than made no sense until I finally said something, which confused her because the hacker was talking to her at the same time.

I changed my password once, and the hacking stopped for a few minutes and started again. I was then kicked from my own account because the hacker somehow changed my password. I was able to retrieve the "new" password through support from MFC, and I changed my password a second time. I now lost access to my account again... I don't know what to do. Anyone has any suggestion? I just recently got platinum premium member status and don't want to have to start over with a new account again...

 

[Zoomer]

Change your email password?
Then try and gain access again.

But above all, contact MFC support and tell them what is happening.

Look at how your computer is connected to internet.
You have anti virus? If yes, update/run it. If no - then *SLAP*, now go get some.
You have a firewall?
Is windows up to date?
Are you using wireless? Is the connection secure, or open to anyone?

Honestly, there's a shit load of questions...

 

[cptnobvus]

I think I know how I got hack because the hacker was using my account to send out hack link. Basically some link and then say free vid of her (as in the model). The only reason I clicked on it was because I was trying to click a link the model is posting and he popped up and post a link. I clicked it on accident. I believe this was a few weeks back..

What I don't understand is how he find out my new password and change it the first or the second time...

 

[ComicOzzie]

By all means your correct first step was to post this on a message board that can do absolutely nothing to remedy your problem.

 

[cptnobvus]

I have already contact MFC through the support email more then once. I am just trying to see if there is anything else that I can do.

 

[Zoomer]

I am just trying to see if there is anything else that I can do.

I gave you a list of "what else you can do" :roll:

It appears there is no helping you if you won't interact but instead just wait for the magic fix based on really really ambiguous info given.

Good luck :handgestures-salute:

 

[schlmoe]

Change your email password?
Then try and gain access again.

But above all, contact MFC support and tell them what is happening.

Look at how your computer is connected to internet.
You have anti virus? If yes, update/run it. If no - then *SLAP*, now go get some.
You have a firewall?
Is windows up to date?
Are you using wireless? Is the connection secure, or open to anyone?

Honestly, there's a shit load of questions...

While you're doing all these updates...look around for your original Windows/Linux/Macos disks...just in case.

What I would do:

If you run Windows, boot up in safe mode. Go back in time by using a restore point from 2-3, or even 4 weeks ago. What's a "System Restore" restore point? Keep reading.

1. go to a computer that is not infected
2. change all your email/website passwords...then change all the security questions & answers
3. create a bootable disc (CD/thumbdrive, etc) with an O/S neutral virus/malware/spyware scanner (Google for help on this)
4. go home, boot up your PC with the media from #3, run scan on PC and all NAS/ext drives
5. keep running scan until 100% clean

This is no guaranty that this will solve your problem. It's been awhile, but I've seen some nastys that change the MBR and reside in the slack space.

So, an alternative is to pull the drive, put it in a USB drive case and scan it from a clean PC. (or buy a cheap drive, and do it at home)

Keep looking for your original disks/licenses, because even if you have to take it to a shop, no reputable shop/tech will touch it unless you have discs/licenses or COA. Have your back-ups ready, as data recovery is exorbitantly priced.

Oh yeah, if you have ever: done online banking, tax returns, paid a bill, etc. online, it might be a good idea to check your accounts and/or pull a credit report.

I'm sure this is "obvious" to you, but your MFC account may be the least of your worries...

 

[cptnobvus]

Change your email password?
Then try and gain access again.

But above all, contact MFC support and tell them what is happening.

Look at how your computer is connected to internet.
You have anti virus? If yes, update/run it. If no - then *SLAP*, now go get some.
You have a firewall?
Is windows up to date?
Are you using wireless? Is the connection secure, or open to anyone

I did all of the above before I posted on here. Sorry I didn't mentioned that I did.

I'm connected over ethernet through a router. I have ESET security and did a scan already. ESET has firewall, so does router. Window 7 with latest update. Checked my credit card company and no unusual transaction on my card yet.

I am not looking for a magic fix, just want to see if anyone know if has been or know someone had the similar situation and had it resolve.

 

[spookfox]

I'm gonna say it sounds like a keylogger. Spybot S&D does a pretty good job of catching these

 

[cptnobvus]

I'm gonna say it sounds like a keylogger. Spybot S&D does a pretty good job of catching these

I think ESET has spyware/spybot scanning feature already, but I will try this out as well. Thanks.

 

[cptnobvus]

MFC responded and have my account restored. I also scanned 2 of my computers with anti virus and spybot search and destory. changes all my passwords. Thank you for the suggestions.

 

[WickedTouch]

Another quick tip you can use to avoid keyloggers when entering passwords, is to use the Windows accessory On Screen Keyboard (osk.exe) and enter the password using your mouse... any keylogger then only sees mouse clicks not the actual numbers/letters. Always good if you share the machine with someone else...


:twocents-02cents:

 

[Urbo666]

Another quick tip you can use to avoid keyloggers when entering passwords, is to use the Windows accessory On Screen Keyboard (osk.exe) and enter the password using your mouse... any keylogger then only sees mouse clicks not the actual numbers/letters. Always good if you share the machine with someone else...


:twocents-02cents:

thanks for that , didn't even know that feature existed

Windows 7 version even has a predictive text feature which is pretty cool :thumbleft:

To access :-

Microsoft On-Screen Keyboard is installed in Windows by default. It can be found in Start / All Programs / Accessories / Accessibility / On Screen Keyboard or alternatively from Windows key + U.

:handgestures-salute:

 

[Belgian]

hi,

Never click a link that is being posted in the lounge (i mean a url not a link togo to a model's room) certainly not when those url's are dynamic you can recognize dynamic url like this

http://www.domain.com/evilscript.php?action=send&option=email

every url that has a "?" somewhere affter the hostname is a dynamic url and certain actions are being performed when you load it.Also always look in your browser address bar you are actually at myfreecams.com and no antivirus/antispyware program is perfect i would scan with at least two different (use a trusted online scanner as seccond one)

 

[CallMeWilliam]

Also for those shortened links you can use a service like http://www.unshorten.com/, just cut and paste the link and it will show you what the redirected link will be.

Of course it can be a challange to copy the link in the first place.

In Windowz put the mouse pointer over the link and "right click" on your mouse then "Copy Shortcut".

 

[LadyLuna]

He already said it was a case of clicking on the link the model posted only to have it replaced by a member link right when he clicked.

 

[nzhere]

I also had one of my accounts hacked a while back. Interesting it appears to be an automated hack of some type.

My password for example was over 10 characters and a mix of symbols etc rated very strong in password checker sites.

Upon reviewing account activity once MFC restored the account there was nothing in the new chat archives but spam links. So it appears to be some sort of spambot/script my tokens were not touched at all.

 

[AlexLady]

I think I know how I got hack because the hacker was using my account to send out hack link. Basically some link and then say free vid of her (as in the model). The only reason I clicked on it was because I was trying to click a link the model is posting and he popped up and post a link. I clicked it on accident. I believe this was a few weeks back..

What I don't understand is how he find out my new password and change it the first or the second time...

I actually like these "hackers" because they target people dumb enough to click random links.




Call me a bitch, but damn the internet needs some sort of filter.