My Instagram account got hacked. The email address was changed and they enabled 2FA with an app. The account is deactivated now but they’ll probably activate it again soon. I can’t reset the password because Instagram sends an OTP to my email, but I never get it no matter how many email addresses I try.
Then, an hour later, my Ubisoft account got hacked, and 3 hours after that, the email address was changed too. I tried to reset it but it was too late.
I changed my email because both accounts used the same email, unlinked the recovery email, and removed all logged-in devices. Since then, there haven’t been any new issues but I’m still really worried. What else could they have access to?
I ran a Malwarebytes scan and found around 9 trojans in the System32 folder and 5 in my downloads folder, which I quarantined. I’m on Windows 11 and this is the first time I’ve been hacked. I can’t believe it.
I suspect the following:
-
I use a password manager that syncs across my PC and Android. Both my accounts were saved there. If the hacker had access to my password manager, why would they reset my password? It would give them permanent access, but that makes me think it’s more likely my email account was compromised.
-
My email account seems to be the main point of attack because both accounts were compromised through my email’s password reset method. But how did they get access to my email? Also, why attack these less important accounts like Instagram, which I barely use, instead of something more serious like my bank account?
-
I suspect there could be malware, a keylogger, or rootkit on my system that gave them access to my email.
What should I change, and what precautions should I take to prevent this from happening in the future? The Instagram account wasn’t that important, but I want to delete it myself, not rely on the hacker.
Update (270125):
After all this, it seems like the hacker is on a spree. My Reddit account, linked to a third email, was hacked. Then, my Discord account, which had both app and SMS 2FA, was hacked too. I changed the password after each attack, but how did they get into Discord with 2FA enabled, even with the password? My 2FA was linked to my first Google account, which was compromised earlier, but I changed the password and logged out of all devices. I thought that would be enough, but they still had access.
I didn’t reinstall Windows or wipe my Android phone because I thought changing email passwords would be enough. But that hasn’t stopped them. I still don’t know where the backdoor is.