I think I was hacked - need advice

On the other hand if someone hacked your network it is highly unlikely that it will put you warring message like that.

True, BUT…
this “but” is when you’re abroad and not in the range of “free” mobile data transmission.
Note for non-EU users: in EU there’s an agreement that we must have certain amount of data included in our mobile subscription for all EU countries.

If access from other devices does not produce the hacked message, it suggests that the device itself (laptop) has potentially been hacked, rather than your home network.

Have you run any malware / virus scans over the machine ?
Do any other sites produce the hacked message wheny you visit them from the same laptop ?

2 Likes

So if you see “hacked” on one of your computers but not on others, it is much more likely that that computer got messed with, not HA. Additionally, if a serious hacker got in, they would not leave such a message, they’d go to town with your privacy details and bank accounts etc.

If anyone wanted to mess with your HA, they would create another user, or set up some nafarious automation. Check for those. Check when log ins happened. You can’t find any of that, your HA should be fine.

Leaving a “hacked” message has the hallmark of a scammer you came across while browsing who at some point wants to sell you shit you don’t need or lead you to their second step (and then actually infect you) by scare tactics.

And I can bet he was “hacked” while using windows.

It sounds like spoofing to me… Especially if the “hacked” message was a link or included a link.

He Was trying to access HA with a local IP, but never said or checked which IP the “Message” Site were, nor whether it was a simple htlm-source, or infact something worse

With the limited(and nothing further) fact , beside apparently only from 1 device, people here can just keep guessing.

At the good old NT4.0 time i made a prank with a linux-guru ( At a NT4 system-admin course )
i placed a screenshot of Blue-screen-off-death in a plain html, to open in fullscreen, no mouse-click, and opened in browser at login

He kept rebooting and got more and more desperate :rofl:

2 Likes

Although we are coming up with possible scenario’s to help, apparently OP is reluctant in giving any insight in what really happened.

1 Like

Perhaps he was hacked to the point where he can’t even access internet (or run his laptop)… :grin:

I came to the conclusion my HA was not hacked. The issue is only on my laptop and only with Google Chrome. I disabled extensions and the message went away. I dint need any of the extensions anymore so I got rid of all of them. The laptop is disconnected from the internet, I’m planning to wipe and rebuild.

1 Like

Ok, good that you got more insight.

IMHO it’s only your browser that is fooling you: use your favorite searchengine and look for “google chrome hijack repair”

1 Like

The malicious browser extensions have possibly had access to all cached passwords (yes your browser can store an enormous amount of data in the history that can be exfiltrated with readily available methods). You should change them all and take appropriate measures to protect yourself against further compromise, as not all compromises are acted on immediately, some attacks coming years after compromise.

They are out there with ‘the keys to your kingdom’ - change the locks and hope nothing bad has happened like them dropping a backdoor for future access.

The worst kind of compromise is those that are still inside your system after you have supposedly cleaned up, maliciously altering things until your backup chain with unadulterated data is exhausted.

Do not just shrug your shoulders as the above post suggests. You have been the victim of digital terrorism. Report to the authorities. Your situation may be the missing link to stamp out this malicious activity, be it skript kiddies or state actors behind it. “Exterminate with extreme prejudice”

Assume the worst and act accordingly.

Thank you for coming back and filling us in!

I’d be very curious to hear which extension was the cause. I know some people go crazy with add-ons and extensions, and that risks installing malware. Some extensions start out legit and get “updated” to malware. Even legitimate, useful ones have gone bad on me, not in a malicious way, but failing to do their job or interfering with some other feature.