Facebook spammer

[fegsdc]

Hello group recently i have been having a site or someone changing my password and sending many messages to many groups everyday even after i change my password and delete the posts after it happens. The message says:

Atención amigos SERIOUS AND RELIABLE SINGLES
Nuevo hotel aquí en la ciudad está contratando para varias funciones. Las vacantes son inmediatas. Para registrar el cuciculo vaya a: Linktree | Blocked Account

Does anyone know how to fix this??

I have no idea how i got it. Facebook had told me before that someone was using my account also i remember when i went to the options, it was logged in from Brasil.

 

[z3r010]

Enable 2 factor authentication on your facebook account.

 

[RolandJS]

How strong is your password? Without giving us details -- did you create a password from known info about you and yours? Many have made up passwords using people names, pet names, places, birthdates, anniversary dates, and so much more -- most if not all of which can be discovered by surfing The 'Net.

 

[fegsdc]

My password is made of 2 letters + 2 successive letters + 1 letter + 4 numbers. I don't think the password is the problem and i have no idea how they are using it all i know is whoever has my details is sending lots and lots of those messages to more than 20 groups every day....i just activated 2 factor autentication, let's see if it works....

I hope i don't lose my Facebook account when i change phone number too like it happened with paypal...

 

[RolandJS]

A total of nine alphanumerics, I think that can be cracked in minutes by modern means -- others in here can correct me if I'm wrong.

 

[fegsdc]

I just received a message again from Facebook to secure my account and it also says that there are lots of posts not from me again the same spam......I already enabled 2 factor authentication but it is not working....

 

[RolandJS]

Immediately establish a brand new -- more than 9, maybe around 15+ alphanumeric character -- password on your account. Use a truly random set of alphas, numbers, and a special character or two in the middle. Type or write it down, keep it in a safe place. I think your current passwords have been and are being cracked. Afterward, test by completely exiting Facebook, exiting browser, restart browser & restart Facebook.

 

[samuria]

You can check on FB and see who is logged in and their ip and log them out if they get logged in and stay logged in even if you change the password they often wont be effected. The other problem is not FB password but your email password asthey can try logging in hit forgot password and FB will send a code to your email if they have access to that their back in

 

[RolandJS]

OP might have to change email password then Facebook password - one right after the other. Strong ones too, no EZ to remember, generate a monstrous scramble of 15-20 alphanumeric & special characters. That is one step to take among others.

 

[fegsdc]

I just changed my password yesterday from 10 characters to 20 characters but today i still got a notification from Facebook saying the same thing, that my post goes against community standards as spam....

I really don't know what to do anymore!!

 

[fegsdc]

Let me try today a really random password and see if it works

 

[samuria]

In facebook cliclk on the account icon top right then security and privacey then activity loga which shows any post your account has posted then go back to settings choose security and login that shows who and when someone logged in you can log users out from there try and match it to the time any post were made if they stay loged in they stay that way even though you changed password so log the bilghters out

 

[RolandJS]

Changing password X on forum X or on website X does not automatically log out bad folks still logged in. Samuria is on spot! Have to get those blighters logged out once and for all.

 

[fegsdc]

I have done what you said Samuria, but it still doesn't work. Today there is only me who has logged in no one else.....I changed to another password and still i got the same warning message from Facebook again....

There is no trace of someone else logging in on my account and today i can't see the posts the spammer has made on activity log....Yesterday there were but not today...

 

[RolandJS]

It might take some time for the current rash and cascade of blighters' emails to, finally finish, to finally reach their targets and/or email dead-letter places, and come to an end. I do not believe constantly changing passwords is the answer if the blighters can no longer access Facebook, nor, will changing passwords will eliminate emails already in the system.

 

[townsbg]

Excuse me if you know this but first under security and privacy > security and login I see where you are logged in and that has the option of logging out sessions. I would do all sessions including your own devices. Also check the authorized logins and then clear those. Maybe temporarily turn off save your login info. As mentioned I would enable multifactor authentication and change your password. Enable login alerts by email. Finally I would change your associated email address so they can't try to reset the password and because the spammer would have been able to see that. For extra security change your password on that account and enable 2fa/mfa. Then I would try the privacy check. Also I would remove any payment information you have saved. You might also want to see these articles:

Security Features and Tips | Facebook Help Center
I have limited access to my Facebook account. | Facebook Help Center

For reference I found all of these through the browser. I didn't check the app.

 

[fegsdc]

Today i got the message again from facebook.

I just did what you asked me to do sir Townsbg, let's see if it works. I created a new email address and completely removed the old one and changed my password.

 

[samuria]

Do you have instagram account as a lot of apps let you post logged in with instagram to facebook but it doesnt show a login

 

[RolandJS]

Awesome solution set townsbg! You're one cool dude. What avatar is that?
Anyway, your solution set certainly addresses the security of OP's accounts! Would you also recommend OP running Malwarebytes AntiRoot utility? I think there still exists an older free version that should data-update and run on-demand just fine.

 

[townsbg]

What avatar is that?

Star Wars: Episode III - Revenge of the Sith (2005) - IMDb

Star Wars: Episode III - Revenge of the Sith (2005)

I was just trying to think of everything a account hacker could get. An email associated with an account upon registration would be something. Those are used for resetting passwords. I think a scan might be prudent but I'm not an expert in malware.

Today i got the message again from facebook.

I just did what you asked me to do sir Townsbg, let's see if it works. I created a new email address and completely removed the old one and changed my password.

IMO everyone should have at least 2 email accounts. If you only have one and get locked out (or worse hacked) you are screwed without a backup email account. On other websites you use an email account to reset your password. If you have a backup linked for recovery you can use that to reset your password. Put them both as recovery accounts for each other. Log into the other one regularly to keep it up to date (some autodelete after a period of inactivity) and so that you remember your password. That reminds me that I need to log into one of them.