Have you ever been a victim of cybercrime?

I'm curious how it happened. Tell your stories. picrel

>>6062 >be year 2006 >get first big purchase >guy offers to trim my armor for free >trade him my adamant armor >he didn't trim it feelsbadman.class

>>6062 all the feds on lainchan got cybercrimed by fake internet profiles and websites registered to the avengers heroes. (glow in the darks included according to the congressional report)

My bank card got skimmed at an ATM a few of years ago. There was no financial damage but the bank deactivated my internet banking access until I got a new card.

>>6064 runescape was unironically an important part of me getting into infosec RS players were terrible -- scamming, account stealing/recovering, social engineering, fake runescape phishing sites, keylogging, RATs, botting, the works

Someone almost blackmailed me out of a lot of money. Thankfully I realized it was a scam. That was fun.

Girl in an online game took all my items. I had her number so it really was a girl and we had a lot of fun for some weeks, but one day she just took all my assets. Oh Well. Lost the domain of my mothers company to some domain squatting idiot, but it was like <10 visitors a months so .. ok. We just got another one. Bet he is now making mad advertising money from this (tip: he isn't). Thats about it and I know it's nothing serious. Domain squatters still suck though. I'd like to burn the dudes car or so while imaging his fuarrrkface.

I hat to enable JavaScript in order to upload my study exersices on my universities content management system.

>>6062 Yahoo sent me an email saying that an email I tried to send was to an invalid address. >I didn't send any emails. Try to log in it says account was last logged in by a Russian ip address >Do I look like a radioactive vodka drinking soccer thug? I change me password and migrate to gmail. Reading the news 3 years later >Yahoo lost 900 trillion passwords a few years ago ya no soykaf

I regularly connected to an insecure network near my university for convenience. One day I made an online purchase whilst connected to said network. A few weeks my bank called asking if I tried to make two withdrawals of ~300 quid each in Scotland...

>>6062 >9th grade >doing homework >dont know anything about computers or scams >computer freezes and get a warning that my computer has been hacked >tell dad >dad calls "apple support" number on screen >gives access to some indian guy >he installs key logger >years later parents get people trying to withdraw money from their bank account The bank helped them get rid of the key logger and they havent had problems since. My mother is still afraid to make online purchases though.

>>6068 Can confirm, I remember being 10 years old and running keyloggers in the city library computers to steal other kids' RS accounts. Also doing the basic scam of pretending to be some celebrity player.

Few years ago I was playing CSGO and got a message from a couple people to trade some skins. One of them sent me a link to view their inventory and I remember thinking it was weird but still clicked it and yeah they had remote access to my machine and I had to unfuck my comp and I emailed steam about it.

didd't happen to me, but an office memo went out saying not to use dating apps, because a guy traded some lewd photos with what he thought was a gril, but then got scammed into "this is the father of the underage girl you messaged, i wont call the police if you wire me money" aside from the bots, spyware, and catfish on there, just another reason to not use dating apps

My mother-in-law spent nearly half an hour on the phone with a scammer. She wasn't in any danger of giving him back details or credit card numbers because she is an inveterate time bandit, she just droned on and on and on at him until he just had to give up. I almost felt sorry for him, I don't know if he was prepared psychologically to handle a stoned pommy whinger who completely ignores everything you say to complain about something completely different, then starts repeating herself.

>be me >be 13 >became friend with one of top 10 hackers of turkey >learn programming by him >be 16 >get fired from his website >leak all vip documents, codes >"your personal website hacked by X team" >your personal mail(gmail and I don't use this acc my machine) hacked by X team >apologize >ok but we forgot your password of email adress or one of us changed it doesnt want give >fugggg

>sign up for popular service >forget about it >some time later, see news article >popular service got hacked >db is posted publicly >passwords in plaintext >fug nothing ever came of it because i don't reuse passwords, but shortly after that a friend called me because he also used that service and reused his passwords and someone got into a few of his other accounts. >>6304 sounds more like a reason to not go looking for jailbait on dating apps. didn't chris hansen teach that guy anything? when i was a punk teenager i did something along the same lines where me and one of the girls at my school pretended to be a 12 year old girl online and catfished this guy in his late 20s into driving 40 minutes to meet the fake child at the mcdonalds play-place, but all we did was spray paint "pedophile" on his car as soon as he went inside and then hide and laugh at him from across the street.

>>6062 >be but a wee lad >download Fate:Stay/Night VN from sketchy site >Vista keeps blue screening upon boot since >clean install Ubuntu >werks and that's how I became a GNU zealot

>be Lloyds of London >group has threatened to leak thousands of “secret” documents stolen from insurers and government agencies that they claim reveal the truth about 9/11 – unless they’re paid not to. >be needing a LOT of btc asap finally the bear market will be over! must thank The Dark Overlord Hes probably gonna release the keys payment or not!

>>6062 >Be me, ~15 y/o TF2 player years ago >Really into trading hats and virtual items on steam/tf2 before it was a big thing with CSGO et al >Get added by some guy inviting me to trade with an url which at first glance appears to lead to steam >Page opens, looks like legit Steam, don't give it a second thought and log in >Doesn't let me log in even though I double check my credentials >Look at the url >it's something like 'steamcomnunity.com' >tfw got phished >Phisher was kind enough to only take two of my most valuable items and left the account intact >Got the items back by contacting steam support In retrospect I couldn't be happier this happened to me at a young age because it reminded me to be more careful with my computing. A life lesson for practically free.

Sorta. Once tried logging in my bank and instead of asking for one of the 3 digit passwords, it asked for all of them (they give you a card with 100 combinations when you sign up, once per login, you provide 1). Ultimately i didn't send the form, just changed my bank password and made the switch to linux for everything including games. I never figured out how i got pwned at all, at the time i didn't even have the time to be at home that much, so it's not as if i was going to unknown sites or anything. It was really weird.

I used to use Windows I own a smartphone My desktop still has proprietary firmware running on it

Negative, I have been the perpetrator of cybercrime. If you live in Georgia, Alabama, Cali, D.C, Russia, China, sorry but that how it be sometimes

>>6789 They don't think it be like it is, but it do. Most "hakr groups" are for posers and skids anyways. Good on you.

>>6805 to be honest most of the "elite" hakr groups are just a loose connection of people selling and trading info and stuff and they're much more inviting than skiddy groups that you "need to prove yourself to"

Not really. My parents scared me off enough to not put my real name or anything associated with my identity online before giving me my first laptop. It had viruses at some point but eventually I learned to reinstall the operating system as well so I have a relatively peaceful cyber history.

I recently got hacked at my workplace by a colleague and probably someone from the outside. In fact that outsider is an IT professional, who helped set up our firewall. Currently with the accomplices inside the domain and with the firewall's know-how, I don't see how to find any clues that lead to the attacker. Reading my private emails from my work computer was a man-in-the-middle attack or a firewall attack. Then a simjacking and WiFi poisoning took care of my smartphone. Now I'm trying to hide the second SIM I've bought in two days from the attackers. Shit is like kicking dead whales down the beach

I am now sure how the fuarrrk, but I have had several fraudulant charges posted over time to my bank account... which have all been refunded thank god. This has happened with different cards I believe. see I set up my ultra l33t secure arch system, and then created a PCI passthrough windows VM to run my sketchy games and other bs. the problem is out of laziness I have logged into my bank accounts multiple times from that VM so my guess is that the VM is infected. I don't know, there's so many ways to steal card info these days. Is this not something others have experienced? I really should start virus hunting but I don't know shi5 about windows security

>>6069 Stop keeping CP on your navi Lain. I had something similar happen when I was 11 and internet porn was the hot new thing for my monkey brain.

Yes. Its fun when you fight back. Its more fun when you're the one that started it.

>>8073 Document what games you have on there and automate the installation based off a snapshot of freshly installed and configured Windows. Automated provisioning is the term IIRC.

>Girlfriend got iphone stolen >got a call from "support" that it got recovered and i should enter page to accept it >get in page because i was fuarrrking nervous, got to login >thisisbait >"hey dude how do i know that you're not trying to steal my account" >*bunch of bullshit about certificate and soykaf* >check certificate, is valid, check page, seems valid >fuarrrk it, so dessesperate to get phone back that i enter credentials >phone got intantly deleted from icloud And thats how i got a phone stolen from some mexican, i still fuarrrking blame myself for that, how could i've been outplayed like that

>>8144 And what did the GF think of this?

Somebody stole my steam account

once had my ubisoft account hacked by a russian guy only know this because he didn't change my password or anything, just kept switching my language to russian and racking up hours in splinter cell i didn't really worry about it, i never played splinter cell and the only thing i used the account for was to play far cry--no credit card on the account or anything--so i just let the russian bro have his fun afaik he still has access, godspeed russian bro

There were some instances where someone was trying to hammer their way into my FTP server. Also someone once actually got into my VNC, luckily I was using the computer at the time, so I wrestled for the mouse cursor with him and managed to shut down VNC, then changed the password.

>>8144 lmaoooo

Spotify account robbed I thought fair enough, but when I saw his piss poor music taste I just deleted that soykaf.

>>8152 Didnt care, after that she bought an android and is way happier with it

Not me, but my friend got three different steam and one origin account stolen.

i was forced to use MacOS in order to explain how to install homebrew and prove that mac can run unix like commands.

BlueMail / ProtonMail > Gmail

>>8187 >i was forced to use MacOS in order to explain how to install homebrew and prove that mac can run unix like commands. That's not really a cybercrime by law - spying is legal, as far as it is stated in the privacy policy. But you surely were a victim of proprietary software.

>>6306 Was that group's name XYZ?

>>8191 >BlueMail proprietary google ad sense-fueled soykaf

the php soykaf was broken and they compromised the database now I the service is down because there is noone to clean up the database

>>6062 My small-business employer, not me, but yeah. Pretty dull story really. No-one in the company has been maintaining our wordpress site for years (I'm a recent hire in the office) so of course we've been owned for a long long time. Recently someone crypto'd our site and demanded bitcoin. No big deal really. Our actual line of business is pretty damn old-school, we don't need anything but a glorified billboard on our site. So I convinced the boss to just abandon that old crap and let me manage it all. fuarrrk wordpress with a rusty baseball bat. I'm going to do it all with Hugo. I fuarrrking LOVE hugo.

Not a victim but the offender.

>>6068 not just in RS. Same happened for Dark Orbit, too. Actually all of the forum ePvP.

I've never been a victim, but I've known several offenders.

My e-mail got hacked back in highschool by some "friends" i was lucky to notice it right after they logged in so i just changed passwords and ultimately deleted that account. To this day idk how they got the passwd, probably by looking over the shoulder whenever i typed it since our computers were always close to each other.

Embarrassingly, I have a lot of stories where I get my soykaf stolen. Me and a close friend use to share an account for an MMO and I bought some in game currency for us to use, but they got mad at me and ended up deleting a character that had a lot of equipment that was purchased with said currency. Stupid to even share an account but we were kids at the time. Sadly, I didn't seem to learn my lesson into adulthood. A year or go ago I had an ex partner hack into an account they made for me on another game site (some card deck tracking site and they wanted to introduce me to the game). I say hack but I wasn't able to change the email or password on the site, so they already knew the credentials and left "deck lists" with some mildly threatening descriptions on my account and then deleted it after I contacted a moderator on their IRC. They also got into me and my close friends ExHentai account (need that sweet GP it's a group effort don't judge) and kept favoriting futanari loli shota furry hentai and had to ask them to stop it. Changed a LOT of passwords after that since I used their PC for mundane soykaf like Steam or stupid list sites and didn't want them touching my things in some creepy attempt to scare me. There was karmic justice though for this though 'cause they ended up getting doxxed with all their passwords for probablly doing the same soykaf to other people. I don't share dumb accounts with anybody now.

I lost my first World of Warcraft account to a convincing (well to a 13 year old...) phishing email about suspicious activity. Jokes on them though, I was an utter noob and had 8+ toons all under level 50 plus I never fell for a phish again

>>8144 FAIL Always hang up and call the official number you find on their website.

>>6076 >Yahoo this is also how all my accounts were hacked. >use yahoo and integrate your other main e-mail account so you can access it from yahoo mailbox >one day suddenly you receive 4 password request mails per minute in both of your two mails >even your bitcoin account is captured (wtf) >the hacker deletes the messages after they came but forgets to delete from trash bin Lost a few accounts. was a very shocking moment, after that my paranoid has started. Now using 20 character unique passwords for each accounts.

>>6062 Wizard asshole in Diablo PKd me in town with a hack and stole all my items.

>>8930 It's not really about having a strong password anymore. Most of the time they are just downloading old hacked databases (I mean, even just public ones are enough for most people) and they try your old passwords on different services. I had the same thing happen to me, all my accounts detected some abnormal behavior at the same time. The guy had a script checking my old password on different websites. Change your passwords every month at least and use 2FA.

>>9495 A lot of my non-technical family and friends asked me what they could do to protect their accounts. The easiest things you can do with the most return are just enabling 2FA, and using a password manager. >Most of the time they are just downloading old hacked databases (I mean, even just public ones are enough for most people) and they try your old passwords on different services. Yes. Another scam floating around is where people claim to have "hacked" another person's computer and saying >We hacked ur soykaf! <password from LinkedIn breach> >Give us $300

>>6337 My dad downloads things from sketchy sites sometimes. How do I check his computer to make sure there are no keyloggers or malware on it?

>>9763 First of all, download a firewall and see if any software is trying to make connections.

>>6806 this "Groups" exist for one off goal oriented projects, everything else is a insider trade.

>>6062 Some kid scammed me out of my RuneScape account when I was ten.

>>9768 That's so sad, If I can help, I'll gold trim your armor for free.

I severely doubt it counts but I'll throw it in. So, I was playing Maplestory and I wanted to sell something. Somebody else was selling the same item. I was more desperate to sell the item and make some kind of profit than I was to sell it and make a decent profit so I started selling it at a cheaper price. He then started offering the item at an even cheaper price. I think there may have been a bit of a back-and-forth between us as he starts offering cheaper prices than me and I do the same to him before eventually, I found myself getting spammed with Trade Requests at an inhumanly high rate (there must've been tens of requests every second). Within moments of this, I was disconnected. He clearly used some kind of software to eject me from the game because I was stopping him from making a decent profit!

When I was a kid yahoo chat was a big thing. You could install these vb programs called booters, create like 100 or so random yahoo accounts, put your accounts:passwords in a txt file and load them into the booter, and then blast people offline with thousands of pm's and friend requests and file sends and so on. A big thing was "illegal" accounts, which were accounts with _ at the beginning or end of the id or symbols, like account__ or @ccount. You could crack them using http proxies and wordlists. I cracked a few in my days and had a few of mine cracked. I can't have been the only one. Anyway Once I installed a booter from some site, and it came along with a keylogger that stole my favorite illegal name when I logged into messenger with it. Good times. Yahoo was great back then.

>>6062 When i was young i was watching p*** on my netbook at home, and the page downloaded a ransomware. When it was activated my firewall blocked it but i didn't know it was malware, i thought it was an update or something, i didn't know so much about computers at that age so i let it pass and, well... you imagine the rest of the story, it was kinda funny the ransomware cuz it had an image of the king of my country.

>>9780 I bet this was Assad-ware during the arab spring. There was a lot of that going around.

>>6068 I think quite a lot of online games of that fashion grew an interest in infosec for quite a lot of young people. Me included.

Got a ransomware somehow. The guy was nice enough to link me to RSA's wikipedia page and I started reading about it. I had nothing of value on the PC and used to format hard drives once every 6 months anyway.

>access to a http page trough phone >browser warns me about possible attacks >http in 2019, i had no idea back then >in less than a second my browser starts downloading files that i've deleted from my card, incluiding porno and some memes

How is that kind of soykaf even possible? Like, i always entered some sketchy websites, but was always smart enough to no give any data, does javascript has those fuarrrking powers to retrieve data or steal similar things? Shit what the fuarrrk, use a decent browser, what the fuarrrk.

>>11357 >porno and some memes Did you accidentally visit imageboard without tls certificate? >>11358 Such people usually open every .exe file that comes in their email, then complain about money disappearing from bank account without contacting bank over phone and freezing all transactions.

>>11358 js can read local files, theoretically you could read a history log and replicate downloads. Modern browsers dont allow fileread without user input to prevent data theft but there might be a hack around it or op actually clicked on something. Bet if you made a transparent screensize button you could get results with people tapping the screen unintentionally.

>>9775 Where was the FTC during this ordeal?

My e-commerce website has been carded few times but nothing really severe that has happened directly to me. Also I have witnessed multiple low level scam and fraud attempts but they were obvious.

If its gaming then eve online. There is a skill that lets you set buy orders with only 30% of the payment held. When a seller tries to fill the order the game checks if you have the rest of the money and if you dont it simply fails. So what people do is they find a rare item. Buyout the market. Then restock at 10x the price. And then set a buy order at 15x elsewhere. Noobs who dont know the buy order can fail happily see a possible trade they can make and buy the 10x items only to travel half the galaxy and see it fail. The only way to know is going by the old "if it looks too good to be true its a scam". I didnt know and thought it looked like a scam first time but couldnt understand how it was a scam. So i bought one item to try what would happen. Its the only scam i ever fell for and it was just cause of my curiosity.

javascript is leaking alot of info in exchange for convenience https://browserleaks.com/

>>11378 Js allows you to read out obscure audio driver details that are enough to identify you. I cant imagine who came up with this outside someone looking to fingerprint.

Years 200x My first times on internet, discovering chats, emails... Someday I receive a mail from my provider telling me that they need my password and soykafs to ensure the address was mine. Email was haxed with very poor social engineering. Anyway the address was not used for serious business. My first and only sec fault (as long as I know). Was so young lol. But since this event I understood the harsh way how soykafs works on the internets.

>>6062 a retard bought my password that i used when i was 8 on every website (because i was 8) and then sent an email to me saying that he will send my porn history and pictures of me jacking off to my employer(which i dont have) and post them on my facebook(which i also do not have) also when i was 10 i had "cia" siezing my computer for child pornography and demanding me to send bitcoin to unlock it i was scared (i knew it was fake because i had watched a news report about such an attack recently)until i restarted the computer and that "warning" went away

Tails

In the same week I got scammed trying to buy coke on deepweb, guy with good rating did a runner on everyone week b4 NYE Also, probably cause I was messing with xanax at the time, tried to buy some prepaid credit cards. Was a gamble which I might be worth a try, wasnt. All of that stuff on the deepweb is a trap.

>>12498 >until i restarted the computer and that "warning" went away persistence 0

>>12521 >>12522 >>12523 is this a bot?

>>6064 >Have a character that's, at the time, actually of an impressively high level >Get told by some person on an account of a friend of mine to give him my account details because he's a GM and something something >Remember a friend of mine telling me I'm dumb if I believe anyone who says they're a GM or something >Decide to prove my friend wrong and give this guy my account details >He wasn't a GM >I lost my account >He changed the password so I can't get back in >I deleted the account, making it irretrievable because I didn't want anyone to have it if I can't have it >I wasn't able to get that name again for some reason so I made a similar name to it >Constantly bothered by the fact that my new name is basically my old name with an extra letter and I'll never have my old name again and that aesthetic I never even took time to appreciate when I had it is now permanently destroyed I told everyone I got "hacked" but that's not quite right and I was scared that everyone thought I was stupid. They probably did.