Hey everyone, this evening while I was streaming a video on YouTube, I noticed some strange behavior on my PC. The video paused, the cursor seemed to move on its own, and my PC alt-tabbed by itself. After that happened, I got worried and decided to turn off my PC, wipe everything, and do a fresh install of Windows. My question is, how could this happen? I know about remote access software like AnyDesk, but the only program I had installed was TeamViewer, which I hadn't opened in about two years. A friend of mine suggested it might have been a RAT attack due to a VeePN extension I was using on Chrome. Another weird thing is that all my Discord servers are marked as read, and I definitely didn't do that myself. Can anyone help me understand what might have happened here? Did someone try to remotely access my PC or copy data without me noticing? Am I safe now?
2 Answers
You should check for any unknown users on your system. Press Win + R, type "sysdm.cpl", go to the advanced tab, and check for users there. But honestly, it could just be a glitch. Random cursor movements and an alt-tab could happen for a number of reasons, and it doesn't necessarily mean you have a RAT. Just make sure to check for any unknown accounts and keep an eye out.
There are so many ways one can get a RAT, but the chrome extension you mentioned isn't likely one of them. The weird cursor movement might not be serious, especially since you've reset your PC. The discord thing, though, raises flags. Sometimes RATs can lift login tokens from your accounts which can let them log in without needing your passwords, bypassing two-factor authentication entirely. My advice would be to change your passwords for all your accounts, especially your Microsoft, Discord, and Google accounts. That way, you’ll reset any stolen tokens they might have. And remember to log out of any unfamiliar devices as well.
I didn't know about the tokens part, thanks so much for the tip!