My Facebook and email were compromised, but I have regained access...

ePeen · 08 Mar 2012

I'm not sure how this can happen, I'm not trying to give the usual "this is not happening, I never make mistakes!", but I truly believe I have not messed up. I understand that your emails & accounts don't randomly become comprised, but I don't know how this time, I really don't. I've been with computers for a VERY LONG time, and I have made my fair share of mistakes and had my fair share of viruses and malware, but this makes no sense to me.

I was browsing Facebook and then logged out automatically upon refresh. Upon trying to log back in, my login was incorrect. I went to check my Yahoo email and I was logged out of that (I always have keep me signed in enabled), and details were incorrect as well. I did the usual recovery of my account via my secondary email and got back in. Whoever compromised my email moved all of the password change notifications / emails to the trash folder so I wouldn't see it, but the trash was never emptied... so a lot of good that did.

Anyways, the user logged in from Cali and it showed the IP and everything via Facebook. I got everything back and change my passwords, but I just cannot fathom how my accounts were compromised like that. I use Noscript so unless I allow a script on a certain site, specifically phishing links, the scripts won't execute.

I've never had this issue until tonight... and I am kind of paranoid right now. I ran a Malwarebytes quick scan and it found nothing as usual. What else should I do? Should I change my email entirely on everything to a brand new email?

chris1neji · 08 Mar 2012

I would suggest making sure you know your security questions. If this password is the same on another email or website that is critical remember to change it. All you can really do is change your passwords link your accounts to your phone or a secondary email of yours.

Use another security software to scan your computer just to double check its not on your end.

Personally i use the same passwords for all non critical stuff forums/ random sites

Emails have similar password except for 2 which are highly important to me.

and my bank all have passwords that i dont even remember however they are encrypted in a file on my computer. The encryption password is strong and secure also.

Can you warn Facebook about it? I don't think they monitor accounts since it's a free service after all.

Good Luck though

ePeen · 08 Mar 2012

Yeah, thanks. I changed all my passwords, especially my PayPal. I added a new secondary email to my primary Yahoo email for recovery and changed my primary email's security questions. Changed everything for Facebook and also added some extra security features, like telling me when someone is trying to access my Facebook, etc.

Since I've done this, there have been no warnings or anything, and nothing has been changed again. I guess my email SOMEHOW fell into the wrong hands, but everything seems to be okay now.