Hi everyone,

I’ve implemented strong security measures like 2FA, password managers, and even security keys to protect my accounts. Despite all this, I’ve still experienced hacking incidents that don’t seem to fit common explanations like session hijacking or phishing.

I’m trying to understand what advanced attack vectors or vulnerabilities might be at play here, and what steps I can take beyond the usual advice to secure myself better.

Has anyone faced similar issues or can share insights on deeper cybersecurity operations, attack methods, or advanced defenses? What should be the next steps when standard protections fail?

Thanks in advance for your expertise!

  • LedgeDrop@lemmy.zip
    3·
    12 days ago

    Are you accessing these through your web browser? If so, do you check the “Leave me logged in” button enabled?

    As others have suggested, maybe your OS is compromised and the attacker is stealing those authorization cookies from your browser and/or dedicated clients (ie: discord).

    You might want to log out of all your other browsers/clients and either try something like LibreWolf (maybe the portable installation) and configure it to remove cookies or use incognito sessions.

    The other suggestion (rather then doing an immediate reformat - as others have suggested) would be to create a second windows account and see if that improves the situation.

    If you do decide to reformat (and keep windows), I’d suggest using windows pro (you can buy a grey market license, if the price is too high and you’re okay with the moral and technical risks). As windows pro allows you to have multiple users. Then create an Admin user, which you will only use to create a non-admin user for yourself, as your daily driver account.

    You can still use the non-admin user to install apps, but each time you’ll need to type in the Admin password. It basically turns windows into a quasi “Ubuntu sudo” access. The upshot is that if your non-admin account is compromised, your OS should still be rather secure and you can use the Admin account to either explore the compromised account or create a new non-admin account.

    Good luck