Facebook account hacking with iPhone X links - Page 2

Solved
Précédent
  • 1
  • 2
  • 3
Mapi
 
Re,

Well, I had removed Facebook from my phone but it still posted anyway.

I don't know anything about it, but just in case, I'm going to remove Messenger Lite since it's pretty much the only thing still linked to Facebook.
0
Blue-castle
 
I don't think it's Messenger Lite... What other apps do you have linked to your account? Have you done a network connection analysis (like Avast's Wi-fi Inspector)? Have you checked the apps in your personal history? (go see my previous message)
0
Mapi
 
Yes, I did all that...
For the WiFi, I’m connected with my phone which serves as a modem for my computer.
I’ve removed all the apps related to Facebook, etc.

Thanks for the reply anyway ^^
0
Blue-castle
 
Do you have an app called HTC Sense? (visible in the personal history on Facebook, at the bottom left of the filters, there is "Apps" and the history of apps already used with your account) And if so, what is its status regarding "permission to post on your behalf"?
0
rafik
 
Hello, I have the same problem. Do you think it could be related to Facebook or the account itself?
0
spectralKnight
 
As mentioned above, I'm almost sure this comes from the HTC Sense app which has permission to publish everywhere. You need to set it to "Me only" and see if the posts continue.
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Not very convinced about the web browser, but if you want to give it a try.
After that, just turn off the computer for an afternoon to be sure.

Reset/Repair the web browsers affected by the issues:

or

Google Chrome:
Reinstall Google Chrome properly by following this procedure exactly: Repair and reinstall Google Chrome properly
(If you have a synchronized account, read the next paragraph).

Firefox:
Reinstall Mozilla Firefox properly by following this procedure exactly: Repair and reinstall Mozilla Firefox properly

Please press a key to continue the disinfection...
0
ArnaudduanrA Posted messages 2 Status Membre 1
 
Thank you.
I’m waiting to see if it still publishes after uninstalling Messenger on my phone, and then I’ll do the procedure afterwards.
0
sy
 
An afternoon is not enough... I received my first messages on a Friday, the next ones on Sunday, then the following Thursday and Friday. So it’s not every day. I uninstalled Mozilla Firefox and I’m no longer logged into Messenger on my phone. For now, it’s been 3 days. But I’m not getting my hopes up too soon.
0
Blue-castle
 
Unfortunately (or fortunately, I don't know), it doesn't publish regularly but at specific times, so we can’t know if we’ve put an end to it. We just have to wait... But it would be good to know the origin of the hacking to be sure we’ve gotten rid of it, because personally, knowing that someone can access my Facebook account without my knowledge doesn’t sit well with me, especially since there's a possibility that this person could access more than just Facebook.

What needs to be done for those who will have future posts is to first check the origin of the post in the personal history to see which application made it and also to check the account's login settings. Take a screenshot as proof.
0
Dude23kk
 
Hi everyone, so I've done everything that was recommended, I don't have any more apps, I got rid of Firefox to see and remove the malware (apparently) the messages reappeared yesterday afternoon and in the connection log, now it went through Chrome since I had a Chrome connection just before ...

So, I already know that it must come from my PC but apart from that, I don't see what else I can do ... I had posted the FRST reports, apparently nothing abnormal ... C

It's very very annoying
0
Javier711 Posted messages 7 Status Membre
 
I think it comes from the phone. If you're connected with the app, you must have accepted something related to your Facebook, which provided your credentials as well as your password. The best thing to do is of course a complete analysis of your computer and phone.

Then, delete all apps linked to your Facebook; you should find this in your Facebook settings.
Uninstall the Facebook app, change your password by going to the site from a computer, and then reinstall the Facebook app on your phone.

Normally, you shouldn't have any more problems.
0
_Sonic_ Posted messages 7 Registration date   Status Membre Last intervention  
 
Hello,
I personally uninstalled Mozilla Firefox to use only "Safari" (on my Mac and my iPhone). I was fine for 5 days, I believed it, but no...! It started again last night and this morning. I really don't understand, it's hellish, I don't know how to put an end to it, except for deleting my Facebook account.
0
sy
 
Hello,
Do you have Messenger on your phone?
If so, in Fbk, settings, security and login on your computer, do you still have your phone connected? If yes, disconnect it.
For now, that's where I'm at. I've even completely uninstalled Messenger. It's been 8 days since I've received any messages in my groups. And I admit I'm really hesitant to reinstall Messenger... But I will have to try to make sure it's really the source of the problem.
0
aelita21 Posted messages 3 Status Membre
 
I also uninstalled Facebook and Messenger from my phone, and since then, nothing!
I hope it lasts... but I would really like to be able to reinstall these apps :/
0
Mapi
 
As of January 1st, it's back after 2 good weeks of peace.

I will proceed to reboot my phone today.

In any case, we shouldn't celebrate victory too soon haha!

Anyway, let's keep the faith.
0
Jay
 
Me too, but this time it's a different message:

Hi, a few days ago an ad aired on television claiming that it was easy to get the new iPhone X for free <3 Indeed, you just need to type the code: GOX256IPH into the Google search bar and click on the first link that appears at the top of the page :D
Then, you need to fill out the registration form and wait for the company to contact you :o It's that simple. Yesterday, I received a package in the mail containing the brand new iPhone X 256 GB. I recommend you try it for yourself and hurry, as the offer is supposed to be limited!
0
Balthazar44 Posted messages 10 Status Membre
 
This thing is an horror!! Removing Messenger and Facebook from my Samsung phone wasn't enough. Connections are made through the HTC Sense app, so via a phone (not mine of course). I deleted the app but it was reinstalled immediately. I have now disabled the app installation platform on Facebook. In principle, nothing can be installed anymore. There's no need to say that I change my Facebook password every time. Clearly, Facebook's anti-fraud service is not very effective. My computer is clean (Norton permanently installed and updated) and Malwarebytes too. The same feeling of helplessness as the other members of this forum.
0
Balthazar44 Posted messages 10 Status Membre
 
Well, it seems I've bothered someone by disabling the app feature on Facebook. I'm receiving notifications asking if I want to reactivate it.
0
Blue-castle
 
That was what I had deduced from my first post. But I think it's a keylogger, although I'm not sure. That's why the password change doesn't work. But I don't know how to detect a keylogger because a basic antivirus like Avast doesn't detect them... (for those who don't know: https://www.leblogduhacker.fr/keyloggers-explication-contremesures/)
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > Blue-castle
 
There are no keyloggers on your computers, otherwise we would have removed them..
=> https://www.malekal.com/keylogger/

Keyloggers are standard trojans with keylogging features and others.
We would have seen it with FRST.
I don't think it comes from your computers.
0
Marion
 
Hello everyone, I am going through the same thing as you for over a month now. I am also living a nightmare since my account is purely professional. It’s comforting to be somewhat supported in your company.

I’m therefore contributing my situation to help find the cause of the problem.
I was using Mozilla and the posts in the groups began. I indeed had the HTC Sense application installed, I uninstalled it but it didn’t change anything. After installing malwarebytes, Avast, CCleaner, changing passwords, strengthening the security of my FB account, uninstalling Mozilla, using Chrome instead, nothing changed.
So I deleted my Facebook account to create a new one (as I mentioned, I have a professional account that I need daily). I was fine for 3 weeks, the time it took for my old account to be deleted, then it started again.
So from my experience, deleting a Facebook account did not solve anything.

I want to point out that I have a Mac computer and a Huawei phone. Last week I formatted my phone but it didn’t change anything. Maybe I should format the Mac?

I also had some changes in the messages, at first it was phones linked to HTC Sense I believe, and now only iPhones.

Feel free to reach out if I can shed more light on my situation, and I will happily follow your progress.

I will end with a question: where can I write to Facebook to report the issue? I haven’t found any address.

Thank you all and see you soon.
0
Balthazar44 Posted messages 10 Status Membre
 
I advise you to disable the Facebook platform feature "Apps, websites, and plugins" (go to settings/apps). Ever since I did it yesterday, I've been regularly receiving requests to reactivate the feature, but of course, I keep it disabled. No more HTC Sense apps and annoying posts for now. I hope I've found the Holy Grail.
0
Marion
 
I had already disabled it, unfortunately, it didn’t make any difference..
0
Juliette2607
 
I also have the same thing happening to me and I don't know what to do. But reading your comment, I think it comes from our computers. Should we format them? Yet the previous comments say that it wouldn't come from them.
0
Balthazar44 Posted messages 10 Status Membre
 
Email sent just now to Facebook with a link to this discussion list. There's nothing to lose by trying.
warning@facebook.com
0
Marion > Balthazar44 Posted messages 10 Status Membre
 
You're welcome!!!
0
Jay
 
Hello, I just did a full Avast scan and it couldn't verify some files when looking at the detailed report. Considering that some have the same name and are found in my Steam AND Mozilla AND Chrome, I'm going to see if deleting them changes anything. Let me know if you find them too

C:\Users\(insert name)\AppData\Local\Temp\tmpaddon-3915c1 (inside there is a widevinecmd.dll.lib that we can't see)
C:\Users\(insert name)\Appdata\Roaming\Mozilla\Firefox\Profiles\(your profile name)\gmpwidevimecmd
C:\Users\(insert name)\Appdata\Local\Steam\widevine

Since it doesn't seem to be preventing the apps from working, it's worth a try.
Run your antivirus and see if it tells you that it can't scan certain files.
Personally, it told me they were corrupted.
0
Jay
 
After checking, it shouldn't be the problem, but I deleted all the files that Avast couldn't verify.
0
Marion
 
I downloaded ESET and deleted an infected file. For the past 4 days, there have been no issues. To be continued...
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
I would be surprised if that's the case.
0
mpuissance4 Posted messages 14750 Registration date   Status Contributeur Last intervention   2 171 > Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention  
 
Hello Malekal_morte

If with Facebook it's like that if you don't go through their stuff ^^
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > mpuissance4 Posted messages 14750 Registration date   Status Contributeur Last intervention  
 
I'm talking about these detections; they are not detections related to malware targeting Facebook.
In any case, it doesn't come from the computers.
0
mpuissance4 Posted messages 14750 Registration date   Status Contributeur Last intervention   2 171
 
Hello

Why not try this https://www.facebook.com/help/389666567759871?helpref=search&sr=1&query=facebook+infecter
I did this for a friend and she no longer has message sending issues from her account
Analyze your device. Our partners offer various tools to help you analyze and clean your computer or mobile device:

ESET

Best regards

--
Time heals all wounds, even if it doesn't spare us a few scars.*^_^*.
0
Marion
 
Thank you for your message. I have since downloaded ESET and a problem was indeed found on my computer which I have removed. I downloaded it on Tuesday, and it has been 4 days since I have had any publications. We'll see if it continues...
I will keep you updated, thank you anyway for your help!
0
spectralKnight
 
It continues for my part...
0
Marion
 
It's continuing as well... I'm desperate.
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Given the FRST reports, I am certain that it does not come from the computers.
There would need to be a malicious extension on the browser used to spam on Facebook when the person is logged into Facebook. It uses the open Facebook session with the browser to post messages as if it were a human, simply that the extension is doing it.
However, in the testimonies, the spams arrive even when the computer is off.

For the computer to be infected, there would need to be a propagation system like a fake video.
We would have identified the problem a long time ago.
It was already used in the past: Viruses on Facebook.

What is strange is that even people who enable two-factor authentication receive these spams.
This normally excludes logins from unknown computers due to password recoveries and thefts.
So either it is a Facebook application on the accounts, but when I asked I was told no.
Or it comes from people's phones.
Or it is a Facebook vulnerability.
0
Marion
 
I personally deleted my Facebook account and created a new one. However, I kept my professional page. And it has still come back. Am I the only one who has tried this? Should I delete my account again?
0
Mathou67 Posted messages 2 Status Membre
 
Hello everyone!

I am so relieved to see that I am not alone with this problem that started for me at the end of November. People in the Facebook groups where I post can sometimes be a bit harsh and don't understand that there is no solution to this problem. I had to leave my swimming and college group, which is really inconvenient...

For my part, I have maximized my Facebook security, I have disabled the app platform, I have uninstalled and reinstalled Firefox, and run several antivirus programs without success.

On the day of my first malicious post, Facebook informed me that the HTC Sense app had just been installed on my FB. However, I cannot find it anywhere, except in "Settings - Personal History - Apps," but I can't change anything there.

I should note that I use Mozilla Firefox, Messenger on my iPhone, and also Facebook on my iPhone, where I am continuously logged in. The messages are also posted when the computer is off.

Good luck to everyone!
0
Damned_03 Posted messages 4 Status Membre
 
It started again for me earlier, nothing works (even after resetting the phone and having no apps except for the basic android ones).
Has anyone here ever contacted Facebook? Because if so, I'd like to get their message to send it in turn. Otherwise, I will probably make one this weekend.
Good luck! :)
0
lioda78 Posted messages 1 Status Membre
 
Good evening everyone, like you, I've been dealing with this Facebook account hacking issue with an iPhone X for 3 weeks...
Like most of you, I've set my FB account with maximum security, and that hasn't changed anything.
I had considered deleting my Facebook account, but when I see the results, I don't believe it would be useful.
Unfortunately, I'm only here to share my experience, without having any solution myself.
I hope one of us will find a solution, as this is really frustrating (I had to leave all the groups I was part of, just to avoid polluting them...)
Catch you later!
0
saammmm
 
Hello,

I have the same problem as you, maybe my testimony can help move things along.

I believe it started in November, with posts in all my groups (all at the same time each time). I then got banned from some groups and left the others. Except for one which I use as a "test"; my friends in that group certainly don’t miss the chance to tease me.

As for my different Facebook sessions, I have one at home on my PC that stays open, but my PC is only on in the evenings between about 7 PM and 11 PM. And I have a session that is open at the office during the day, but I log out every evening.

I don’t have a smartphone, so no Facebook/Messenger on my phone or tablet.
As advised earlier, I have revoked access to apps, websites, etc., in the settings.
And like some, the HTC Sense app is present in "personal history", "apps".

After numerous attempts (changing password, email address, reinstalling Mozilla), I'm a bit out of ideas.

Hoping that by combining our experiences, we can find out where this "virus" is coming from.

See you soon,
Sam
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
Apparently a new wave of spam with Google codes px256gog: https://forums.commentcamarche.net/forum/affich-35172001-virus-ipx256gog

--
Please press a key to continue the disinfection...
0
Sixa
 
I confirm, I just went through it...
0
Lylamdra
 
Moreover, I've never had HTC equipment and I don't have an HTC account, so ....
Personally, in a desperate move, I literally disabled the application platform; I hope that way it won't reinstall ....
0
Lylamdra
 
How can a HTC app install itself on your account ... that's the question ...
0
Gwenn
 
Hello everyone,
My mother has the same issue as you. She does NOT have a smartphone, she only connects with her computer, using Mozilla. And the Facebook security settings have no effect on it, so I think it comes from the computer... We also uninstalled HTC Sense from her Facebook apps, but it keeps reactivating itself each time without her doing anything for that. And with each reactivation, it posts in her name (sometimes more than 3 weeks later). She believes it started after clicking on a link that asked her to update Adobe Flash Player to watch a Facebook video (or maybe after a Firefox update).... For your information, generally, no one else uses her computer.
Question: if some people use multiple accounts on the same computer, does it post on all accounts? And is the HTC Sense application activated on all accounts that post such messages?
Thank you in advance for your responses. In the meantime, I will try other solutions and keep you updated!
0
Lylamdra
 
Hello,
you could try a few things like:
- disabling your application platform (personally, it’s useless to me) after uninstalling HTC Sense once again.
- disconnecting your FB session every time you’re done.
- checking in your browser if you have a Flash Player 2.0 EXTENSION. Personally, I had it, it didn’t belong there and I got rid of it immediately. I mean an extension, not a plugin.

As of now, and for a while now, I haven’t had any posts (knock on wood *taps head*). I haven’t done anything special, but I no longer use FB on my phone (just Messenger), I systematically disconnect my sessions when I’m done, and that way I’m never logged in on multiple devices at the same time...

Hoping this helps you...
0
QQ
 
A response that was posted on another forum about this issue and which I hope will help us resolve it. I just did the manipulation:

"Hello,

Just for information, and if it can help others: the problem ultimately came from a rogue Firefox extension, which had nothing to do there and that installed itself under the name of Adobe Flash Player (but it has nothing to do with that application). So to permanently get rid of (at least I hope) those spam posts in your Facebook account, you just need to go to the Firefox menu, then Add-ons, then Extensions, and if it’s there, disable it. It’s quite radical (in any case, for me, it stopped the problem dead in its tracks, which was becoming increasingly invasive), and it avoids having to completely repair Firefox (which I would have done otherwise).

So, this time I’m closing the topic.

Thanks again for your help and perhaps see you soon,

Lady M."
0
Cline
 
Good evening, I have no extensions in Firefox and my problem still persists!!
0
GeorgesZ
 
It's the same for me.
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
For the Adobe Flash extension, this is what is indicated in this message: https://forums.commentcamarche.net/forum/affich-35063724-piratage-compte-facebook-avec-liens-iphone-x?page=2#157
0
Mathou67 Posted messages 2 Status Membre
 
Hello everyone,

Problem solved for me since a month ago when I completely uninstalled Firefox from my computer and downloaded Google Chrome instead.

Hoping I could help you!!
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
0
unevisiteuse
 
After receiving multiple spam like everyone else and reading the forum, I uninstalled my Facebook and Messenger apps from my phone and reinstalled Chrome and Firefox "cleanly" following the tutorials by Malekal_morte. This was on February 15th and since then I haven't had any problems. I'm going to reinstall my mobile apps because I think it comes from the rogue extension according to recent messages.

Malekal_morte: a big thank you to you for all your advice!
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711 > unevisiteuse
 
You're welcome :)
0
unevisiteuse
 
Well ...
I don't know if there's a connection. I reinstalled my apps on my phone yesterday morning and last night I got a new spam.
0
yan
 
Good evening,

As for me:
Using Mozilla.
HTC Sense posts on my behalf. This name HTC Sense does not always appear.

- Uninstalled the HTC app but it keeps coming back (a second window opened when launching Mozilla)

- Changed browser. -> switched to Chrome.

It had calmed down and this afternoon, new iPhone posts even though I haven't opened my computer.
So I'm focusing on my phone. Uninstalled Messenger and deactivated Facebook.

To be continued.
0
Charlie
 
Good evening, I would like to bring this topic back up to propose something that seems to be, for now, the only solution (that I found after searching for a long time, but I stumbled upon it by chance in an article):
https://korben.info/un-conteneur-firefox-pour-emprisonner-facebook.html

I installed this small module on my Firefox browser, and since then I haven't had these pesky posts in groups (the few groups that hadn't kicked me out because of this issue, specifically). We'll see over time if it lasts, but there you go, I recommend doing this.
0
Tchalla7
 
Hello!

Like everyone else on this forum, I've had the same problem. This issue started about 3 weeks ago. Then it happened every week after that. I think the problem appeared when I started logging into Instagram. Just so you know, I have a Samsung A3, and I think the phone plays a part in this. I have a strong feeling that it's certain apps on the phone that are posting these messages.
0
gwen
 
Hello,
Like everyone else, I have this problem that started around November...
I deleted Facebook and Messenger from my phone, and then I completely reset it. I was fine for several months, until early April when it started again... So I reset my computer (not having put anything back on my phone), I was on Firefox before, so I changed it up and switched to Opera (including changing my email address and password), I had three or four days without anything and today, it posted in my groups again... It's frustrating and I don't know what to do anymore because like you, I've noticed that when you go to personal history, you find a number of apps that can post in my name (including HTC Sense...), I made sure that I was the only one who could see it but I'm not sure it makes much of a difference, if anyone has any new ideas...
0
Allison
 
Well... After reading your messages, I'm at the bottom of the pit O__O
I've had the same problem for 2 weeks with (little bonus) the addition to groups on top of that! At first, I didn't realize, I was seeing messages from members of groups I didn't know. I looked closer, "Hey... But I don't remember asking to join this group. I must have accidentally done something" and I would leave the group. It was always groups related to my hobbies (video games, movies, Disney, etc...) so I didn't make the connection.
Then the messages started, first iPhone then Samsung. That's when I realized that no, I wasn't going crazy, the groups were indeed requested but not by me.
Since then, I've:
- Changed my FB password
- Turned off my tablet
- Fixed Firefox and only installed AdBlock on it
- Reset my phone (but with my Play Store account which updates my apps, I'm not sure how useful that was...)
- On FB, I can't see this HTC Sense app and yet I've searched everywhere. (even going into the history and clicking on the "more" of apps)
- Today I cut off my apps' access to FB.

I'll see how it goes...
0
laurence30
 
Same issue, with registrations for all sorts of groups, from porcelain painting to people suffering from Tourette syndrome! (6 to 7 a day, at least!!)
0
Malekal_morte- Posted messages 178136 Registration date   Status Modérateur, Contributeur sécurité Last intervention   24 711
 
0
Précédent
  • 1
  • 2
  • 3