Can an infected router/hijacked control panel steal passwords and session?
Can an infected router/hijacked control panel steal passwords and session?
While ago I got malware and removed it and changed password and enabled 2fa and then 2 months later I was session hijacked and password changed on these accounts and I couldn’t find any foreign ip as all non my ip sign in attempts failed. I had an antivirus at the time also and I changed some password again on another pc and it still got hacked. Oddly enough my new email never had any sign in attempts or password changes even during that (I made it after the infection) I found out my router had wan access to admin enabled.
Also; when they changed my gmail password it shows the password was changed on my iPhone which was impossible.
[quote=“falogan34, post:1, topic:851795, full:true”]
Can an infected router/hijacked control panel steal passwords and session?
Can an infected router/hijacked control panel steal passwords and session?
While ago I got malware and removed it and changed password and enabled 2fa and then 2 months later I was session hijacked and password changed on these accounts and I couldn’t find any foreign ip as all non my ip sign in attempts failed. I had an antivirus at the time also and I changed some password again on another pc and it still got hacked. Oddly enough my new email never had any sign in attempts or password changes even during that (I made it after the infection) I found out my router had wan access to admin enabled.
Also; when they changed my gmail password it shows the password was changed on my iPhone which was impossible.
[/quote] Yes if your router is infested, when session cookies can be hijacked by an attacker, with trojans on your device, with weak security settings and by an attacker having access to your saved credentials - Gmail password change. We do not have removal specialists here, go to the MBAM forum for a personal cleansing of your device on a secure connection.
polonus
All my devices have been scanned and nothing, oddly enough only the accounts form the info stealer was hacked and not the email I made a day after that was fine during the hacking afaik, nothing has been detected but we got a new router, think we should be safe?