Yahoo email hacked

[sunshaker]

today my pc was acting up(now on old laptop), I could not get into my emails, in the end tried to get in touch with yahoo by phone i got number online, there where 3 numbers each gave an engaged tone then cut me off, i then tried next number 08002796226 (yahoo email support?)

this was answered straight away by indian "gentleman" within a minute he had control of my computer, said i had been hacked from canada,

for security he wanted date of birth telephone number, then he started flicking through my systems, after 10 minutes he said they could sort it for 380pound, which i refused then he asked for 200 which i refused he dropped to 70quid, i told him he is yahoo support how can he charge me?, he mumbled something and then said 50quid, i refused and asked who he was and what department he was with, he hung up on me still leaving me hacked.

my pc is no longer even able to excess the internet, all, programs are corrupted, will not restore,

(i can now access email on laptop).

 

I have a feeling this indian was part of the hack, to extort money, i have phoned the number again but no one answers.

 

i use avast antivirus, plus i changed my password, will this be enough?

 

ps the indian chap while in control was going through all my program files even saying look that is where the "hacker" is taking control of your system in realtime,

will this laptop also be in danger?

 

cheers.

[Endy0816]

Support helpline scam. Can't trust anyone but the official site itself(accessed from a non-infected device). Possibly coupled with ransomware or the like. Almost certainly is infected at this point in any case.

 

Check your contact info associated with the email account, make sure that wasn't changed. If so, change the password again after putting it back. Delete any old messages in case the initial problem was caused by something you downloaded.

 

As for the desktop, you may need to restore it to factory default. There are videos/guides online or you can take it into a repair shop if you'd rather.

 

If the scammer didn't have access to the laptop it is probably fine.

Edited September 7, 2015 by Endy0816

[John Cuthber]

It's a scam. If you google that number you find it pretends to be the support number for google, Norton, hotmail Gmail etc.

Normally they call you;

https://www.shouldianswer.co.uk/phone-number/08002796226

you were unlucky to get their number .

[sunshaker]

Support helpline scam. Can't trust anyone but the official site itself

Thank you, good advice,

think you must be right, I thought it was the official site.

I must admit this laptop is very slow at the moment

It's a scam. If you google that number you find it pretends to be the support number for google, Norton, hotmail Gmail etc.

Normally they call you;

https://www.shouldianswer.co.uk/phone-number/08002796226

you were unlucky to get their number .

 

 

0800-279-6226 is a scam Indian support company which masquerades variously as Microsoft support, Gmail support, Dell support, Yahoo support etc etc. They scammed an elderly friend of mine out of £100 and all they did was install remote control software and uninstalled his antivirus from his perfectly OK computer. With full access, heaven knows what else they did, but stealing all his password and username details would be easy.

My avast antivirus did disappear "bar$tards". i'll have to check bank.

 

i suppose i am vunerable now/

[Sensei]

I must admit this laptop is very slow at the moment

 

You must start from disallowing this machine connection to Internet.

Because they're probably still monitoring what you're doing (observing screen-shots taken every second or few seconds, recording keys that you press, listening microphone if you have it, observing room by net camera etc. if you have them built-in, like in top end modern models, you can't even disconnect them).

[MonDie]

Sensei is right. Disconnect it. Don't trust a GUI either; physically disconnect the ethernet cord, etc. That's the first thing to do before using forensics techniques on a compromised system. You can no longer trust its web browser content anyway.

Wireless laptops usually have a wifi hardware switch that lets you toggle wifi with a keyboard shortcut. AFAIK it's not part of your operating system, so it's out of the hacker's reach.

Bluetooth can be compromised too, but I think that's only with multiple compromised devices "talking" with eachother.

 

For extra, extra safety, don't plug in important USB devices. BadUSB code was released online, and it may be in use by now.

Call your Internet service provider, and ask what to do. They might have you hard reset your networking devices. This usually involves holding the reset button 30 seconds or so. Each device has a sticker on it with a domain name or IP address for accessing the settings after reset. Just put it in the address bar like a website name.

You must start from disallowing this machine connection to Internet.
Because they're probably still monitoring what you're doing (observing screen-shots taken every second or few seconds, recording keys that you press, listening microphone if you have it, observing room by net camera etc. if you have them built-in, like in top end modern models, you can't even disconnect them).

 

What about VoIP hacking? Could they do it remotely?

If he has VoIP phone service then, to be safe, he should know it could be tapped or even spoofed.

 

I find it odd that he was cut off three subsequent times until reaching the scam number, which didn't cut him off. If they gave him over-the-phone instructions that let them into his computer, then apparently they did it "within a minute"!

 

 

My avast antivirus did disappear "bar$tards". i'll have to check bank.

i suppose i am vunerable now/

 

I can check my bank account balance over my cellphone with one of their automated service systems.

Just remember, those are some sensitive dial tones! Make it silent.

Edited September 8, 2015 by MonDie

[Sensei]

What about VoIP hacking? Could they do it remotely?

If he has VoIP phone service then, to be safe, he should know it could be tapped or even spoofed.

 

Not sure whether Windows drivers allow multiple applications to record what's being said to microphone.

You would have to check OS API specification. But as usual in Windows there is probably couple different API (old legacy, less old, modern).

OTOH, if they have admin access they could (theoretically) replace drivers or part of OS to modified version, which would include such functionality.

Or modify any file on disk such as Skype.exe or its libraries.

Edited September 8, 2015 by Sensei

[MonDie]

Why does one stupid machine have to have so many capabilities!?

Why!? Tell me why!

Just imagine when they start hacking into our smart homes!!!

http://www.wired.com/2015/09/smartthings-desperately-wants-turn-houses-smart-homes/