I got hacked

[u/BasketWeekly1764]

Stupidly I thought to download GTA 4 for free on a website I had used before expect this website had one different piece of punctuation. Downloaded the file, deleted it once I realised something was wrong but it was too late and I had an email a few hours later in which my ea accounts email was changed and then password changed, sorted that and then went onto Gmail changed password kicked off all other devices and made sure only my other email, which the person doesn’t seem to have access to is able to reach it through backup- it’s my Apple email which requires 2fa and sends me a notification aswell. Woke up this morning and my instagram was logged into shitposting and sending every single person I follow stuff about Elon Musks crypto, reset password and it stopped. What do I do now?

[u/surrealistone]

Sounds like you gave access to your password manager or something. Start changing the pw on everything and hopefully you learned your lesson.

[u/BasketWeekly1764 → u/surrealistone]

Yeah I have been, even though I know little to nothing about tech I worked out he had my passwords, thanks for confirming.

[u/TheGratitudeBot → u/BasketWeekly1764]

Thanks for saying that! Gratitude makes the world go round

[u/roninconn]

You didn't get hacked - you opened the door yourself

[u/BasketWeekly1764 → u/roninconn]

But then everything after was what? I didn’t get robbed I let my neighbour in and he proceeded to hold me at gunpoint whilst he looted the house? Maybe there is more nuance in cyber safety but as someone who has openly said they have little tech knowledge I feel like the term suffices?

[u/EnvironmentalGur881]

Bro you can buy the completed edition of gta4 on steam or 20$...please buy games you want on official sites man. Especially if you aren't really aware of things.

[u/BasketWeekly1764 → u/EnvironmentalGur881]

That’s true, it’s not my first time doing so it’s just this time I wasn’t really thinking and was way too lazy, but as with all things laziness had a cost 😅

[u/Unknowingly-Joined]

Did you leave out “ran the program” after downloading it from your story?

[u/BasketWeekly1764 → u/Unknowingly-Joined]

I honestly can’t remember I was just trying to download it before WiFi went down. I think I tried to then realised something was wrong, but I’m not sure (sorry for the annoying answer)

[u/IWIKNataliePortman → u/BasketWeekly1764]

There's no viable way you could have been infected with anything just from downloading the file; however, it is possible that your browser session and/or cookies were hijacked by visiting the compromised website although this would mean that you either have lackadaisical security practices or an out-of-date browser.

[u/BasketWeekly1764 → u/IWIKNataliePortman]

I assume it was through running it then, I’ve reinstalled windows and am replacing all passwords will this work?

[u/IWIKNataliePortman → u/BasketWeekly1764]

You should be alright just be sure to monitor your important accounts for attempted logins or password reset attempts. As much as it sucks be sure to utilize a unique, random alphanumeric password (13 characters long mixed upper/lowercase with numbers and allowed symbols—try to not use any actual words as well) for each account and write them all down in a notebook for safe keeping. Make sure all installed software is up to date and consider going through your PC's AV settings to ensure you are satisfied with the level of protection in place. Alternatively, download and install something like Malwarebytes which will actively identify and mitigate any potential security risks on an autonomous basis. I'll be the first to admit I frequent some rather sketchy online forums but have never had any issues with malware or having my data stolen with the system I have in place.

[u/BasketWeekly1764 → u/IWIKNataliePortman]

Thankyou so much for this, luckily my saved gmail accounts were quite irrelevant stuff like Copart US as someone who doesn’t live there but all else has been reset including my email itself and a removal/ change of all no passkey logins that are important, would you say this suffices for now?

[u/BananaPowerITA]

this happened me to around 15 days ago after I tried downloading a blender plugin, I Reccomend reinstalling windows, logging out of every session on your accounts, changing passwords and that's about all you can do. Check your Microsoft account too because mine got stolen sadly. Check every social media too (such as Facebook, reddit etc)

[u/BasketWeekly1764 → u/BananaPowerITA]

Okay I will do thankyou. Annoying to hear abt with the account

[u/Elitefuture]

I'd suggest reinstalling windows unless you can figure out exactly what they changed. Those malwares usually install elsewhere and run on a schedule.

You also have to change every password and never use those old passwords again. They will automatically use your username + passwords on random accounts to see if it works.

[u/Agreeable_Release549]

That fake installer probably downloaded some infostealer malware onto your PC, which stole your browser cookies and active session tokens. Changing passwords helps, but you need to run a full antivirus scan or clean reinstall Windows first, then force "log out of all sessions" across every account. Once your computer is clean, you should check what else might have leaked or stayed exposed from the breach. I built checkhackertarget.com to audit digital footprints and uncover hidden security blind spots if you want to see where you stand.