My family is facing serious issues with fraudulent transactions on a bank account. While someone was sleeping, a substantial amount of money was transferred to two different people using the bank's "Pay a Friend" feature. The bank provided an IP address linked back to our home, claiming it's not fraudulent activity. Is there a way to check if someone accessed their computer remotely to initiate these transactions?
4 Answers
If you're using Windows, check the Event Viewer. It might show any remote access attempts. You should also look for unusual programs or startup entries where malware could hide. Just keep in mind that some advanced malware can delete logs or operate in memory to cover its tracks, so be thorough! Also, check your router if it keeps logs enabled; you might catch some odd connections there.
Another possibility is a Remote Access Trojan (RAT). These can be sneaky, and often they erase their own tracks. If you suspect a RAT, you might need a forensic expert to dig deep and uncover any hidden access.
It's tough to say for sure, but if you're worried about remote access, assume you might have malware. The best first step is to back up any important files and then perform a clean install of your system. Monitoring network traffic can be complex, so if you're unsure, a fresh start might be your best option. Just stick to trusted downloads from places like the Windows Store.
Just a heads-up, some attackers use VPNs or spoof IP addresses to hide their tracks. So even if the IP points to your home, it doesn't necessarily mean you're in the clear!
And don’t forget to wipe your phone too! Better safe than sorry!