Hacked FB Account!

[pvr]

2 factor requires the code generated on your phone before allowing you in the account sensitive area. In other words, nobody can change your password without having your phone as well.

Most secure systems require that and when available, you must use it

 

[MikeyH]

Mikey, that’s about the long & short of it! It is that easy to start up a new account but I have a lot of saved family photos on there which I will lose :x

:thumbsdown:

 

[DevonPaul]

You have to ensure that you switch on 2 factor authentication on your account. That applies to any website that supports it

Good tip, just done this on FB

Tim.

I do this on anything of any value, or that doesn't have an easily contactable moderating team. So I don't have it on here (not sure if I can) or a couple of other forums including PH (though if someone hacks that it doesn't really matter).

I also have slightly different passwords for them all, but similar enough that I can't remember which is which

Without 2FA then as soon as they are in they change the mobile and email addresses and ANYTHING you do to recover it goes back to them, I even heard of someone on the phone with a bank moaning their fraud team were sending reset codes to the scammers phone "because that's the number listed in the online portal, Sir".

Ann set up 2FA with HMRC years ago. All was fine until we moved, as she'd done it so long ago she didn't have a mobile and had used the landline number. I think that was sorted in about 3 weeks as they finally agreed to send the reactivation codes by post. To the old address.

 

[pvr]

As they got in the FB account, make sure that you do not have that password for anything else as they will try your email address with PayPal, Amazon etc etc

 

[jock156]

Password is already changed I’ve also logged out

Strange thing is, according to my kids they did nothing to my account it’s just a new “Brian xxxxxxxxx” using my profile pic asking all my friends to be friends AGAIN

Gave up trying now as it’s so repetitive, but, the more I’m away from FB the more I’m enjoying not being on it. Just my business page In hindsight I should have made the wife as admin then at least I could gain access

 

[M1k3yC]

I scanned through this and the information seems fairly helpful: https://statuslabs.com/blog/facebook-hacked

If you used your Facebook account to login to other sites (i.e., if you used the "Continue with Facebook" or "Login with Facebook" option) then those sites are potentially compromised as well so need addressing. As a general rule, I never login to a third-party site with Google or Facebook for this reason. It's a bit more hassle creating a separate account but it mitigates the impact from scenarios like this.