Could Malware Still Be Compromising My Accounts After a Fresh Windows Install?
I downloaded a suspicious file, and within a couple of days several of my online accounts were compromised. I ran a deep Windows Defender scan, which found and…
account compromise
How Can I Tell Whether My PC Is Still Compromised After Account Takeovers?
About a week ago, my Discord and Steam accounts were compromised and used to post a scam message. I changed my passwords and enabled two-factor authentication on my…
How can we contain a self-propagating Google Workspace phishing campaign using AiTM proxies?
Our enterprise recently dealt with a coordinated campaign in which attackers used adversary-in-the-middle (AiTM) phishing proxies to compromise accounts in legitimate Google Workspace tenants. Compromised mailboxes then appeared…
My Apple Account was taken over and now I’m locked out by unfamiliar security questions
I received an email saying that my Apple Account password, security questions, and date of birth had been changed, but I did not make those changes. I immediately…
My Apple Account password was changed, but I’m locked out by unfamiliar security questions
I received an email saying that my Apple Account password, security questions, and date of birth had been changed, even though I didn't make those changes. I immediately…
What happens if an unauthorized Azure bill remains unpaid for several months?
I'm a student dealing with an Azure invoice of about ₹5 crore (roughly $550,000) after my account credentials were allegedly compromised. Most of the charges came from an…
How can I tell normal admin activity from a compromised account doing domain reconnaissance?
I'm reviewing activity from an IT administrator account and need to determine whether it reflects routine administration or possible compromise. The account generated extensive LDAP queries against domain…
How can I tell whether widespread SAMR enumeration is normal admin work or a compromised account?
I'm reviewing activity from an IT administrator account and need to determine whether it reflects legitimate administration or internal reconnaissance. The account generated numerous LDAP queries against domain…
How can we reduce recurring Microsoft 365 compromises in a large BYOD student environment?
I work for an MSP supporting a college that is dealing with recurring Microsoft 365 account compromises. The usual pattern is that a student clicks a link in…
Multiple Remote-Access Programs Appeared on My Windows PC—How Should I Secure It?
I have a more than five-year-old Acer laptop running Windows 11. On July 7, I downloaded what turned out to be a fake paperless postcard. The next day,…
My college Microsoft 365 account may be compromised—how should I secure it and check my PC?
My college-provided Microsoft 365 account may have been compromised. I began receiving more than 1,600 delivery-failure messages addressed to different, random-looking recipients, mostly appearing between August 12 and…
Can Microsoft Message Trace Make an External Spoof Look Like a User Sent an Email to Themselves?
I'm investigating a possible incident where a user appeared to receive an email from their own account. I'm trying to determine whether the message was spoofed or whether…
Can Microsoft Message Trace Make a Spoofed Email Look Like It Came From the User?
I'm investigating a message that appeared to come from a user's mailbox and was addressed to that same user. The Microsoft 365 message trace shows the sender and…
How can we reduce repeated phishing compromises when training isn’t working?
I'm a public-sector network administrator dealing with repeated phishing incidents. Employees are surrendering passwords and two-factor authentication codes, after which attackers take over their accounts and use them…
Could malware be behind my Discord and Steam account activity?
My Discord account on my PC was recently compromised and used to promote crypto-related scams. I signed out, changed my passwords, and have avoided logging back into Discord…
Why is my Gmail moving all new emails to the trash?
I've noticed that my wife's Gmail account is automatically moving all new emails to the trash, and it's definitely puzzling. We've managed to remove the filter rule that's…
Help! My Microsoft Accounts Got Hacked After Linking to Discord
I recently encountered a serious issue while playing Minecraft. I joined a Discord server to chat with someone I met, and they asked me to link my Minecraft…
Will resetting my laptop get rid of viruses and hackers?
Hey everyone, I really need some advice on how to remove a possible hacker or virus from my laptop. I might have accidentally executed something suspicious in my…
How Do Filters Get Activated for Spoofed Emails Within Our Domain?
I've noticed that when users within our domain are being spoofed—say, receiving emails that appear to be from their own address—filters seem to activate automatically. When I first…
Help! My O365 Account Seems Compromised – Emails to Contacts and Odd Activity
I have a user who reported that spam emails were sent from their account to everyone in their contact list, and these emails ended up in the Deleted…