Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Home network hacked


  • Please log in to reply
52 replies to this topic

#31 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 29 February 2024 - 01:23 PM

No because then the reboot would likely erase all ISP authentication information and you would then need to call your ISP to allow the router back on.

Your routermay need to be off for a substantial amount of time to get a new IP address to allow for the disassociation of the routers MAC Address and what is listed in the DHCP Lease table at the ISP.

So a simple reboot wouldn't necessarily change your external IP address.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


BC AdBot (Login to Remove)

 


#32 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 29 February 2024 - 01:38 PM

My ISP only requires cable gateway's CM MAC and a house address. There is no other ISP authentication information. 


Edited by Ciceroo, 29 February 2024 - 01:40 PM.


#33 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 29 February 2024 - 01:41 PM

That is the ISP Authentication Information, the Routers MAC Address and your address of service which might be in the ISP Uploaded firmware. prior to you getting it.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#34 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 29 February 2024 - 02:05 PM

So you're saying it's possible my ISP has been hacked also ? Although the hacked cable gateway was old, I don't think I ever received any updates to firmware from my ISP. The manufacturer stopped firmware updates back in 2015.



#35 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 29 February 2024 - 02:07 PM

Naw I'm saying what you say happened likely never happened and the people that claimed they hacked you were kidding / lying.

As a professional hacker, I would never admit or brag about hacking someone or something. I definitely wouldn't do it in such a outlandish way.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#36 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 29 February 2024 - 02:29 PM

I'm not sure what you mean. I believe the hack began months ago over Discord social media platform. There are some outlandish and dangerous people there.


Edited by Ciceroo, 29 February 2024 - 02:30 PM.


#37 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 29 February 2024 - 02:32 PM

The only way they could even hack you is if you downloaded something malicious and you opened it, and you had a port open on your router to allow access from the outside that was exploited. Many routers do not have any ports opened by default that could allow for any exploits.

The malware that they would send you would need to be crafted to exploit a certain vulnerable application or service on your machine.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#38 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 02 March 2024 - 09:21 AM

I have downloaded some pictures from Discord during my years there. I did some research and as far as I know, even clicking a picture if it's send via DM will download it to Discord cache folder - no need to right click and save it on your hard drive. Also I did share my desktop specs including my OS with some people.

 

I often took down my firewall when I was playing on Steam. Some Steam games conflicted with my firewall and I was sadly too lazy to look up for other solutions. I may or may not have also downloaded some movies and series and took my firewall off then also.



#39 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 02 March 2024 - 11:21 AM

I have downloaded some pictures from Discord during my years there. I did some research and as far as I know, even clicking a picture if it's send via DM will download it to Discord cache folder - no need to right click and save it on your hard drive. Also I did share my desktop specs including my OS with some people.


The above is true however you aren't downloading abd executing the program to be opened up in order to execute hidden malaware or scripts to fetch the malware.

I often took down my firewall when I was playing on Steam. Some Steam games conflicted with my firewall and I was sadly too lazy to look up for other solutions. I may or may not have also downloaded some movies and series and took my firewall off then also.


This in of itself won't cause concern with steam because steam verifies the integrity of your files prior to playing and if corrupted they are replaced. The second portion is possible avenues of infection, however, they woukd need to send you the makware laced files for them to gain access to you.

I also share my desktop specs and my other computer specs. You can see them in my signature block. That won't get you hacked.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#40 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 15 March 2024 - 02:13 PM

Sorry for the late reply, been trying to wrap my head around this all.

 

Yes, it is possible I have downloaded some malicious file & ran it but forgotten about it. I've been on Discord many times while enjoying some alcohol.

 

By sharing the specs I was mainly referring to the possibility of the hacker knowing some unpatched exploit in the drivers, OS or programs I'm using, giving them easy & hard to detect access.

 

Yesterday I got a social engineering phone call, someone was trying to pose as an investigator on the case. The caller hung up after we exchanged few words.The phone number was off, I did a checkup on it and multiple people in my country have reported the number as a scam caller.

 

Also I was talking on Discord with a person possibly involved in the hack and during the chat whatever letter I was writing got deleted a few times. As far as I know this might happen if someone is pinging your IP. Seems like a good possibility the hackers are still on my trail and just toying with me.


Edited by Ciceroo, 15 March 2024 - 02:14 PM.


#41 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 15 March 2024 - 02:21 PM

In order for any hacker to hack into a network they would need to know your IP address first, run a port scan, see whats running and open, research possible exploits around those open ports and services, and then attempt to penetrate your network. All this would take a lot of time and energy to perform. It would also be HIGHLY DEPENDENT UPON YOUR ISP's SECURITY AS WELL

The ping command will not remove any information from any computer on any network. It will not remove text or anything like that in real time, and it does not contain that functionality.

Ping - https://datatracker.ietf.org/doc/html/rfc792

Also can you share these so called discord chats and screenshots?

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#42 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 15 March 2024 - 02:54 PM

The info about pings deleting letters on Discord was told to me by a person irl once, I guess he wasn't correct.

 

I can share the Discord chats if I can find a way to recover them. The person deleted me from their friend list, making me unable to open the DMs again. Very likely they deleted their messages also. Also I don't have their Discord ID, should have written it up. But they didn't say anything important if that's what you are wondering, they were mainly interested in my side of the story for leaving the Discord community where I was hacked.



#43 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 15 March 2024 - 03:10 PM

Whoever these people are I have determined they do not have the technical know how to hack anything of any value or in this case you as well. They have made you paranoid for reasons beyond me.

The spam call likely was just that spam. I get phone calls from numbers on both of my phones relating to a potential security issue on my machine and for them to take over. I tell them what I do for a living and they hang up.

I am very knowledgeable in Computers, Ethical Hacking, Network Security and other aspects within that realm of knowledge. I have seen multiple stories online like yours, and in each case the person reporting such incidents were just simply paranoid.

So I do not think with high confidence that you were ever hacked at all.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#44 Ciceroo

Ciceroo
  • Topic Starter

  •  Avatar image
  • Members
  • 24 posts
  • OFFLINE
  •  
  • Local time:07:48 AM

Posted 15 March 2024 - 04:24 PM

Yes, this incident has made me a bit paranoid about online privacy. Sadly, the hack happened. The (personal) info I was told by the hackers back when I got definite proof about the hack was something no one could know unless they were able to see what I was doing on my desktop.

 

About my ISP's security, that is something I can't do anything about. I have informed them about me being hacked already. If I contacted my ISP again, is there some technical tests or checks I could request them to perform to determine if their security has been compromised ?

 

And if my ISP's security has been breached, which is always possible, could it mean the hackers are still following me ?



#45 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:48 AM

Posted 15 March 2024 - 04:42 PM

Your ISP would have already taken action to the hackers had it been a successful hack.

If your on any public databases that information would be easily available and obtainable for a small fee online.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users