|
Hey guys, this is a pretty messed up situation and I could really use a hand. Especially if there's risk of Identity Theft or other things being involved. I have more detailed info on what I have seen, but I think some back story should help explain how I got here: I currently live with my parents, like many a good goon. Like many goons I like to play games online. One such game was battlefield 1, for the PC. I believe this is were the problem started. It's a relatively small but still active community. I have a long history of playing many games, including previous battlefield games and so I'd comfortably say I'm no slouch at playing this game. My ADHD brain and caffeine make me into a fast, twitchy person in online games. Some people can't believe how fast I can react...so much so that they are dead certain that I hack. When playing with headphones I always listen for footsteps, other players shooting, etc. Paying close attention to my surroundings allows to me sometimes figure out where someone's at without needing to see them (or just looking at the drat minimap when flares are in the area...). However there are a number of players in this community that have grown to hate me with a passion. So much so, they decided the best way to get back at me was to compromise my families' home router. I believe it had been using a default password since my mother was the one who set it up, and she admitted to forgetting to change it. It goes further than that. In addition to getting into our router, they were able to take advantage of the router's universal plug and play feature to basically tap into any kind of blutooth device in my home (including my car media player!) and use things like our phones to eavesdrop on anything being said or done. I know this, because things I have said in complete privacy nowhere near any kind of traditional microphone are being echo'd back at me in game chat or people who are a part of this group go through the trouble of performing name changes to reflect on things they have heard that only I had spoken about. At one point, I stupidly decided now would be a good time to get back into my facebook account and they needed me to send in my docs with my potentially compromised phone. After sending pictures of my driver's license and my passport, I saw someone eventually mention my middle initial so there's a good chance thy saw them. Maybe even saved those pictures. Not only that, but I think there have been some weird DNS fuckery that has been causing me to get rerouted to spoofed fake sites. I think there may have even been some reddit page that was showing off a screenshot of our router's online menu while someone was mocking with a thread titled something like "I just wanted to do some port forwarding  ", but I'm not sure if that was a DNS reroute or something that was only up for a little while. While we were looking at the router's online-only (yeah......) interface, I saw my personal computer had been set to the DMZ. I've NEVER made any changes to our DMZ/port forward, and I know using that feature is dangerous. Speaking of the online interface, it has a ridiculously slow log in time to even access it, with it often quitting out after almost a minute at a time. And sometimes not all the options that should be there in the menu are present. And get this, they were even able to make our home phone line redirect calls to wrong numbers no matter how carefully you dial it.I believe that there may have been some remote commands embedded in my windows Services and Task Scheduler settings that I know I never put in. It looks like there are a bunch of xbox related things using some kind of svchost.exe file in my system folder with special execution commands to start recording and doing other buggery that And the little poo poo cherry on top: Any game of CS:GO I play seems to be redirecting me to a very specific server that is controlled by this angry group of spiteful nerds. I'm not exactly sure what to look for, but I did make a copy of the entire steam log that shows some weird networking stuff happening that I don't know anything about. I can post it if people with a better eye can see what is happening. We've changed the passwords on the router, at least I think we have. It's hard to tell if it's actually secure, but there are still windows commands and services that were setup to do other things, possibly more than I know. Windows Defender has not spotted a single instance of any kind of virus or malware that I know of, but I don't trust things for a second. If there aren't any viruses, then there may be even more windows system files and settings that were set up to allow secret communication outside our network while I'm on. We are also using a VPN now, but I think if they remotely put hidden commands in our computers & the router itself then it might not be enough by itself. To summarize: 1. Angry nerds want to invade my home privacy and drive me crazy with their hacker antics because I'm too good at a game. 2. Home router that depends on an online connection to configure was compromised, could still be and we are only seeing what they want us to see. 3. Router using blutooth universal plug and play options to remotely eavesdrop & monitor activity on phones, possibly more. 4. Strange settings I don't remember setting up ever found in Windows services and task scheduler. 5. CS:Go, every ranked match takes me to the exact same server where this group of people 'pretend' they don't know me but they use harassment by repeating things they heard through the blutooth exploit. 6. We think the modem has a good password now, but it's a dual wifi modem and we don't always see all the entries in the online-only menu that should be there (could be spoofed). 7. They could possibly have photos of my driver's license and passport. I really don't think I deserved all this, just because some people are convinced that I hack based on my abilities in an online game that's several years old.
|
#
?
Sep 21, 2021 01:05
|
|
|
|
| # ? May 2, 2024 21:47 |
|
|
not gonna lie to you OP I think you may be suffering from a mental illness. upnp doesn't work with bluetooth, it's a network thing. that CS thing isn't possible for someone to do. and your home phone isn't something people can just hack because they got into your router. this is probably hard to hear but i think you're suffering from paranoid delusions and you probably need to see a professional about it.
|
|
#
?
Sep 21, 2021 16:49
|
|
|
MY INEVITABLE DEBT posted:not gonna lie to you OP I think you may be suffering from a mental illness. upnp doesn't work with bluetooth, it's a network thing. that CS thing isn't possible for someone to do. and your home phone isn't something people can just hack because they got into your router. I know at least one or two people from this group are goons. So they have seen this thread. My svchost file in my system32 had special permissions for "unknown user" and a desktop that shouldn't be connected. My windows services had many commands requiring RPC that were all pointing to my svchost file with the special permissions. Maybe I was wrong about the plug and play feature, but I know what I saw and heard. I still have that steam log for viewing here so people can at least see that part of things. As I said before I know at least a couple of these people are goons, and you coming in and immediately saying "you're crazy" is at the very least pretty rude if nothing else. You haven't even tried to work with me.
|
|
#
?
Sep 21, 2021 17:10
|
|
|
well you could post those logs if you want but that doesn't really change the fact that your home phone cant be "hacked" to dial different numbers and you can't redirect csgo to a specific server in ranked like that. i didn't call you crazy, i said you might be suffering from paranoid delusions. maybe you should ask a professional about the things you think you're experiencing? believing people are subtly attacking you with name changes or saying specific phrases that only you have said is kind of classic paranoia. this isn't an attack on you, it's genuine concern. and im not a doctor, this is just my perception. mostly based on you posting things that hackers actually cant do.
|
|
#
?
Sep 21, 2021 17:22
|
|
|
MY INEVITABLE DEBT posted:well you could post those logs if you want but that doesn't really change the fact that your home phone cant be "hacked" to dial different numbers and you can't redirect csgo to a specific server in ranked like that. You say you have genuine concern but, you don't know me or at least you shouldn't. And again, you are still not even trying to help even the slightest which I have to admit comes across as suspicious. It's cyber gang stalking, and that is most certainly a real thing. Because there is a strong possibility than some goons may be involved and are just relaying this info to the rest of this group of gangstalkers, I'm hesitant to move forward with this issue unless a mod decides to weigh in. At the very least I can give an update on my situation by saying I have made sure my PC is safe. Also, I'm very sorry that I did not use the right format for making this post altogether, this has been stressful after all.
|
|
#
?
Sep 21, 2021 17:31
|
|
|
Take off and nuke it from orbit...its the only way to be sure. 1. Take ALL your poo poo offline if you suspect you are being targeted. Staying online is the worst thing you can do for the moment. 2. Backup your poo poo offline (to external drives...etc), just incase a hijack attempt occurs. 3. Factory reset the router, update to latest firmware and set stronger passwords. Make sure all security features (NAT..etc) are set to highest. 3.b (optional) Buy a newer and different router, ideally something with more layers of protection and newer features/firewalls. 4. Wipe out your computer. Seriously. Format that motherfucker and clear out any chances of viruses, backdoors or unwanted access. A fresh install with current updates and restricted accounts plus any VPN/security software is a must if you feel you are breached. 5. Call your ISP and change your IP address if you are using a static IP. If not, then disconnect and power off your modem and let it obtain a new IP address dynamically. Only after you have a fresh setup, router and PC, then go back online. Don't be lazy about any of this if you suspect you are under attack.
|
|
#
?
Sep 21, 2021 21:25
|
|
|
Slayerjerman posted:Take off and nuke it from orbit...its the only way to be sure. Thank you very much. Thankfully I have backups in place so a full system wipe and some time away isn't a bad idea. We've been eyeing a compatible newer commercial modem but have also been informed that our ISP may already be in the process of getting us a new one, specifically ones that doesn't require an online connection to configure which was a huge issue while this was happening.
|
|
#
?
Sep 22, 2021 03:00
|
|
|
i work in infosec and i have seen this before. the reason i have seen it is because friends of mine have referred their friends to me who it turned out were going through some kind of mental thing maybe you really got owned really hard and are inadvertently misrepresenting some things. i can't say for sure. what i can say is that when i've been asked to look over devices in cases like this, i'm zero-for-double-digits on the problem being infosec-related. it's been mental health every time
|
|
#
?
Sep 22, 2021 03:03
|
|
|
Hiram Grewgious posted:i work in infosec and i have seen this before. the reason i have seen it is because friends of mine have referred their friends to me who it turned out were going through some kind of mental thing When I was examining windows services, the same place where I was seeing Remote my mouse pointer began moving on its own and grabbed hold of my window and shook it a bit before suddenly letting go. I was supposed to be completely disconnected from the wifi and with airplane mode enabled.... I don't hallucinate, and I saw the modifications that I've seen to my system file (C:\Windows\system32\svchost.exe -k RPCSS -p). I will stick with slayerjermann's advice.
|
|
#
?
Sep 22, 2021 03:11
|
|
|
Hello OP, I really don't want to be rude or minimise the chance that you have been devastatingly hacked but along Slayerjerman's advice could you also buy a real cheap carbon monoxide detector and check the levels in your house (if you don't have one already). Especially if you've followed all the steps Slayerjerman put and this stuff is still happening.
|
|
#
?
Oct 16, 2021 10:30
|
|
|
In Windows Defender App & Browser control, in the exploit protection settings there was an entire list of custom entries under the Program Settings for system overrides that shouldn't be there...when I looked into it, it ended up being very much like what is being described here: https://answers.microsoft.com/en-us/protect/forum/all/exploit-protection-windows-10/54271fb4-fa65-4a4f-9cd7-071b39746720 You can make jokes about me being crazy, but this sort of thing is very real, and I've been seeing it on my system. Even a clean boot wasn't enough. I really didn't deserve all this. I may not have that much of a life, but the people who are hard at work to mess with me have even less of a life than I do if trying to hurt someone minding their own business is their goal.
|
|
#
?
Oct 19, 2021 06:04
|
|
|
Wicker Man posted:When I was examining windows services, the same place where I was seeing Remote my mouse pointer began moving on its own and grabbed hold of my window and shook it a bit before suddenly letting go. I was supposed to be completely disconnected from the wifi and with airplane mode enabled... OP I'm not trying to be a dick either but this is legitimately impossible. Think about it: how could someone remotely control your computer if you aren't connected to the internet?
|
|
#
?
Oct 28, 2021 18:53
|
|
|
Could you post a picture of the list of overides? The very first comment on that site explains that they are for Internet Explorer, and I have the same ones on my list along with many others that are enabled by default.
|
|
#
?
Nov 2, 2021 19:30
|
|
|
OP did you ever get this spooky business straightened out?
|
|
#
?
Nov 19, 2021 19:00
|
|
|
Olewithmilk posted:Could you post a picture of the list of overides? The very first comment on that site explains that they are for Internet Explorer, and I have the same ones on my list along with many others that are enabled by default. I have to admit I'm not the biggest computer tech guy, and through research I found out that list of exceptions is normal and is something everyone has by default in Windows 10. That one was a false positive on my part. aceface posted:OP did you ever get this spooky business straightened out? I don't think so. I'm not even sure if what I'm dealing with is either a virus or some kind of hacking tool that needs someone actively using it since antivirus scans always come back clean and I've had this computer's harddrives fully reformatted multiple times, multiple resets and even new routers, but things that are said or done in the vicinity of my phone get repeated back in chat during games of Battlefield 2042 now. Even the phone was fully wiped with the OS reinstalled by an apple rep at their store things were still being heard around my phone. This also includes things that only appear on my computer screen getting referenced indirectly, as if they are seeing exactly what I am seeing. I think this group even uses a Discord channel to broadcast my computer habits like some kind of twisted show to anyone terrible enough to take any part in any of this. It seems like whoever this sad group of people is likes to use games of Battlefield 1 or BF2042 now as their 'outlet' for messing with me. When I stopped playing these games altogether and just stayed away from the source of these assholes, I've been seeing odd stuff on youtube. Things like despite doing multiple page refreshes and looking up random unrelated content, clearing cookies etc., Youtube would keep forcing the same set of recommended channels with suggestive topics (regardless if I am logged into Google or not). I even saw youtube channel recommendations for a couple of old games that I haven't touched or talked about or even use any kind of google search about them, but they were visible on one of my game lists on my screen for a few seconds and not long after I went onto Youtube, I saw recommended videos on those two games specifically...This was before I bought Battlefield 2042 and started playing battlefield again. That all stopped once I returned to battlefield. It's like when I stopped playing those games they could still see what I am doing, but they couldn't use their antics I mentioned from the Battlefield games since I wasn't playing and I'm not there to see their bullshit. But they still wanted to keep messing with me, and they saw I like to use youtube and so for awhile that was where I was seeing strange behavior. Again, that all stopped once I returned to battlefield, their place that they like to use to get their kicks from being trolls.
|
|
#
?
Dec 14, 2021 15:01
|
|
|
Chumbawumba4ever97 posted:OP I'm not trying to be a dick either but this is legitimately impossible. Think about it: how could someone remotely control your computer if you aren't connected to the internet? I’m not sure, but while trying to secure things we ran into something really weird with our ISP: We called our service provider with help securing our router. Part of that was asking the agent if they could remove their companies’ modem wi-if access. He said he could, and sure enough the wi-fi light turned off on the modem. However we were still able to see and connect wirelessly to the modem even though the agent assured us that it was disabled. It was still taking the wireless password and forming a connection just fine. It was only when the agent changed the wireless password from his side that we could no longer connect. Even the agent mentioned never seeing anything like that before. There was also a time when the modem router log in page for managing settings would almost always time out and would not show all the options that should be there. Again that time the agent we spoke with remarked at never having seen that before, and did something on his end that restored those options. Then made it so that we can no longer modify settings except by request through them. I don’t know but maybe there are hacker tools that can make forced wireless or Bluetooth connections possible.
|
|
#
?
Dec 14, 2021 21:00
|
|
|
Wicker Man posted:...Youtube would keep forcing the same set of recommended channels with suggestive topics (regardless if I am logged into Google or not). I even saw youtube channel recommendations for a couple of old games that I haven't touched or talked about or even use any kind of google search about them, but they were visible on one of my game lists on my screen for a few seconds and not long after I went onto Youtube, I saw recommended videos on those two games specifically... The TikTok/YouTube algorithms are very powerful and are capable of making uncanny recommendations. Especially if you have channel subscriptions. Also, you don't have to be logged into any accounts. It can just go off of your public IP address. So clearing cookies or even formatting a computer might not make a big difference either if you have multiple devices on a network. Or if someone was using your Wi-Fi etc.
|
|
#
?
Dec 15, 2021 06:49
|
|
|
Zogo posted:The TikTok/YouTube algorithms are very powerful and are capable of making uncanny recommendations. Especially if you have channel subscriptions. Thank you for that, that actually helps explain some things. Still, I think I’m dealing with something that most people typically don’t ever have to worry about. It’s hard to prove since this is something that is targeting me specifically. I’ve never had to deal with something like this ever before, and as far as I know it’s been going on since at least last year. We’ve seen unexplained jumps in data usage a few months ago for our internet, almost twice as much on average for one month. But I have no idea how to detect whatever is being used to quietly screen share my computer as well as something that can utilize smart phone microphones for passive listening. Stalker-ware is definitely a thing, and all I can think of is that it might be some variation of that. If there’s nothing anyone can figure out on what I’m dealing with and what can be done about it, then I guess that’s something I’ll have to handle on my own. I appreciate everyone that tried to help.
|
|
#
?
Dec 18, 2021 02:25
|
|
|
Wicker Man posted:Still, I think I’m dealing with something that most people typically don’t ever have to worry about. It’s hard to prove since this is something that is targeting me specifically. I’ve never had to deal with something like this ever before, and as far as I know it’s been going on since at least last year. We’ve seen unexplained jumps in data usage a few months ago for our internet, almost twice as much on average for one month. But I have no idea how to detect whatever is being used to quietly screen share my computer as well as something that can utilize smart phone microphones for passive listening. Stalker-ware is definitely a thing, and all I can think of is that it might be some variation of that. If you did everything listed above and if you are still actually being attacked then you're in a big bind. Let's cut to the chase. Smartphones and major operating systems have backdoors and things that various gov't agents/certain hackers can exploit to gain access. Some phone apps listen to people already but zero-click spyware is out there that can turn a smartphone into a great surveillance device with no action on your part. Hypothetically, if you have an enemy in high places there's nothing that can be done short of going full Gene Hackman-mode in The Conversation or Enemy of the State by getting rid of all modern electronics. By merely logging into a flagged account from a different IP address a beacon could be sent out to the surveilling entities no matter where you are on the planet. Governments around the world have spent billions of dollars on eavesdropping technology in the name of counter-terrorism/national security. The US gov't is currently spying on heads of state around the world. But not all people with these tools are ethical actors. If the leaders of huge countries can't avoid it then surely no average person can either. PS I'm not saying this is your exact scenario but just for the sake of devil's advocacy.
|
|
#
?
Dec 18, 2021 23:32
|
|
|
Zogo posted:If you did everything listed above and if you are still actually being attacked then you're in a big bind. I agree, but I don't think this is anything government related. I'm pretty sure I just happened to piss off one, maybe two actual hackers with some major antisocial personality disorders that don't know how to let a grudge go. One or even a couple of extremely toxic people who are insecure and can't handle being called out on their crap so they put their skills and knowledge of of computers and network security to try to "punish" me for whatever bullshit they can come up with to justify their horrible behavior. To further justify their abusive behavior, they try to rope in like minded people to join in on that crap, hence the Discord server stuff.The world has gotten a little crazier in the past couple of years, and so have a lot of people. If they wish to waste their time and lives putting their skills to use trying to mess with me instead of doing something productive, that just shows how pathetic they are as individuals. In the mean time I will mind my own business.
|
|
#
?
Dec 22, 2021 21:09
|
|
|
I apologize for the double post, an update: I've come to discover that it was an old "friend" and roommate, someone who posts on these forums who I could even point to, that was responsible for starting the hack in the first place. He was a narcissistic angry child of a person that couldn't stand the fact that I figured him out and no longer wanted anything to do with him. I've even posted threads about him. He didn't want to lose control over me, so after I got fed up with him and moved out two years ago he was the one that set all of this stuff in motion. All so he can "punish" me for not believing in his lies and manipulation. He's made it his personal mission to destroy me, and is using this group of angry nerds as his flying monkeys to run a smear campaign against me to anyone that will listen. To make me sound like the worst person in the world to justify this gross behavior of stalking and spying on me for the purposes of abuse. It's pretty depressing to know that there are others goons that see no problem with taking part in this. They are using whatever this hack is that allows them to monitor all of my computer activity (including offline with wifi disabled and no ethernet cord in), things spoken in my car as well as my parents car, as well as our Ring doorbell camera to play out some sick version of The Truman Show. They see everywhere I go, and they will follow me online to places I go to smear my name to anyone willing to listen to them about me, to get them to join in on it. I think they've even reached out to one of my so-called friends on my Steam friends list to get details about me for fuel on the mind games they try to play. They are trying to isolate me and have me be alienated from basically any kind of group online. I ask that if anyone has ever been approached by someone asking about me or talking about me to please let me know. If you have any sense of common decency or morals you would see that what is being done to me is pretty hosed up. I would really appreciate it if anyone who knows about this could come forward and tell me, it would be a big help. https://www.youtube.com/watch?v=RuZGvn-b5FU Wicker Man fucked around with this message at 00:29 on Jun 27, 2022 |
|
#
?
Jun 27, 2022 00:26
|
|
|
Wicker Man posted:The world has gotten a little crazier in the past couple of years, and so have a lot of people. This is true. Wicker Man posted:If they wish to waste their time and lives putting their skills to use trying to mess with me instead of doing something productive, that just shows how pathetic they are as individuals. In the mean time I will mind my own business. This is the right mindset to have. Wicker Man posted:They see everywhere I go, and they will follow me online to places I go to smear my name to anyone willing to listen to them about me, to get them to join in on it. I think they've even reached out to one of my so-called friends on my Steam friends list to get details about me for fuel on the mind games they try to play. I'm not aware of a smear campaign against you although SA is a huge place with hundreds of megathreads. If someone was in on something like this they wouldn't come forward ITT because they'd out themselves. The best thing to do with narcissists out for revenge is to ignore them if humanly possible. You can't control their behavior. Avoid technology if you need to in the short-term.
|
|
#
?
Jun 27, 2022 23:54
|
|
|
|
| # ? May 2, 2024 21:47 |
|
|
Zogo posted:This is true. Thanks Zogo, you are definitely right that this isn't something they would willingly step forward and admit to. I guess I'm hoping that there may be people in this group who aren't quite as bad as the rest. People who might try to send me a DM to let me know how this is being done, or give me some warning. But I realize that's unlikely, that anyone that would take part in such a group probably doesn't have the integrity to do something honest. I appreciate you reinforcing the idea of focusing on myself. It helps to hear someone else feel the same way.
|
|
#
?
Jun 28, 2022 22:15
|
|