Facebook account hacking with iPhone X links Solved

Question

Hello everyone,  For the past few weeks, someone has been posting the following message in my groups or on my profile via my account:  "Hello everyone, some time ago, I heard an ad on the radio. The host claimed to know how to win a new iPhone X. It turned out that all I had to do was type the code: "APPLE67FR" in the Google search bar and click on the first link that appeared. The next step is to fill out the registration form and wait for the contest organizer to contact you. It's so mundane! Yesterday, I received a package from UPS and inside, guess what, there was a new iPhone X 64GB. I advise you to hurry up and try as soon as possible because the offer has an expiration date and will last until the end of the week."  It's very embarrassing, and I don't understand how this could happen because:  - I change my password every time this happens (uppercase/lowercase/numbers/letters, something complex)  - I am at the maximum security level in my settings (I'm supposed to receive a notification when someone logs in as me, for example, but I don't receive anything when the hacking occurs)  - I don't play any games, don't have any apps on my account, and don't open any suspicious links. I've disabled everything because I don't need it.  And yet, despite all this, the message appears every day or sometimes every two days on my groups/profile.  What should I do? Thank you in advance for your help; I am desperate....  Good evening and thanks again.

Malekal_morte- · Accepted Answer

The conclusion is on this topic: https://forums.commentcamarche.net/forum/affich-35172001-virus-ipx256gog#20 and the explanation on this link: https://www.malekal.com/arnaque-iphone-1-euro-facebook/  Basically, there is indeed a parasitic extension on Mozilla (it should be available on Chrome as well). In the observed case, it is named Adobe Flash 2.0, but the name might change over time. This extension installs the Facebook HTC application, which explains why, when you delete the HTC app, it comes back.... When you reuse the infected browser due to the extension, it reinstalls the Facebook application upon logging into Facebook. This is what I explained in this message  This means you have not reset the internet browsers as indicated from the beginning because it removes the extensions: https://forums.commentcamarche.net/forum/affich-35063724-piratage-compte-facebook-avec-liens-iphone-x#23 https://forums.commentcamarche.net/forum/affich-35063724-piratage-compte-facebook-avec-liens-iphone-x?page=2#70  Afterwards, you might not have done it on the right computer, because in the first link, the person has the infected extension on their work computer and not on their personal computer.  Today's conclusion, in terms of security, be careful about the computers you use to connect, especially when they are public and shared computers (work, school, cyber, etc).  Note that for Firefox, you can launch it with all extensions and add-ons disabled. This can be useful to use this function on the work computer if it is shared.  EDIT - Malwarebytes published an article about this: https://blog.malwarebytes.com/cybercrime/2018/04/facebook-spammers-making-things-worse/

Malekal_morte- · Answer

Hello,  Change your Facebook and email password. Check Facebook applications and permissions. Secure your Facebook account (two-factor authentication, etc.). See: How to secure your Facebook account  Finally, if you want to check your computer (malware):  Follow the FRST tutorial. ( take the time to read carefully - everything is well explained ).  Download and run the FRST scan, Wait for the scan to finish, a message will indicate that the analysis is complete.  Three FRST reports will be generated:  FRST.txt  Shortcut.txt  Additional.txt  Send these 3 reports to the site https://pjjoint.malekal.com/ to share them. In return, provide the 3 pjjoint links that lead to the reports here in a new response so that we can review them.   Please press a key to continue the disinfection...

RuleOfRose · Answer

Hello, I have exactly the same problem since Saturday and it has repeated three times up to today. I have checked everything, complete analysis of the PC with MalwareByte, Antivirus, Adwcleaner, checking all Facebook applications one by one, changing passwords several times, etc...  So I'm leaving you the FRST reports as you requested, author.  https://pjjoint.malekal.com/files.php?id=20171212_j9v9e15k14h9 https://pjjoint.malekal.com/files.php?id=FRST_20171212_r12c12d15b6o5 https://pjjoint.malekal.com/files.php?id=20171212_x5k15t513u11

Cle75 · Answer

Hello,  Like the previous people, I have the same problem. I have diligently applied the same outdated Facebook solutions, attempted various cleanups, launched antivirus programs, strengthened security as much as possible, with no results.  I therefore allow myself to leave the FRST reports here from the scan of my PC, if someone could please help me, thank you in advance!   https://pjjoint.malekal.com/files.php?id=FRST_20171212_z14v5g15z12s6  https://pjjoint.malekal.com/files.php?id=20171212_j15e8j14x11g12  https://pjjoint.malekal.com/files.php?id=20171212_k13i11m14x89

RuleOfRose · Answer

Yes, I activated them, so the message just resent and nothing at all... We should check what we have in common; could it be coming from a phone?

Dude23k · Answer

Hi, I have the same issue, I only have two files per account with FRST  https://pjjoint.malekal.com/files.php?id=20171213_w10r6i10x15b15 https://pjjoint.malekal.com/files.php?id=FRST_20171213_i11i8w13p12u10  It's annoying, it's the third time in three days.

Malekal_morte- · Answer

We should run tests, like turning off the computer or phone for a few hours to see if the spam stops. (one after the other to check). Try uninstalling the Facebook app from your phones.  But honestly, in the FRST reports, there’s nothing on the Trojan side. It doesn’t seem like there are any malicious extensions on your web browsers.  At worst, you can reset them, but I doubt it will change anything:  Reset/Repair the web browsers concerned by the issues:  Repair Mozilla Firefox (first paragraph)  Repair Google Chrome (only the first paragraph). -- Please press any key to continue the disinfection...

mecquinaplusfb · Answer

So I have the same problem as you for the past 2 weeks. I disconnected from my PC for a day and it started again. I'm resetting my iPhone to see, I'll keep you updated.  Try to list what might have caused this for you!! For my part: - new second-hand phone - created an Aliexpress account - I don't see anything else..  I want to emphasize that yesterday, I did an important Windows update and reinstalled Firefox! (I also cleared Firefox caches just in case), but I had already run CCleaner yesterday and Malwarebytes without finding anything.

Sy · Answer

Good evening, I have the same problem since Sunday. It stopped yesterday (even though I didn't do anything different) and it started again today.  As for my phone, I only use it for Messenger. I ran antivirus, antimalware, and everything imaginable... Nothing! The computer is not infected. I changed all my passwords. I uninstalled all the add-ons associated with my browsing software.  Security on Facebook is at maximum. It's not hacking; the messages are indeed sent from my place. But how?  I've tried to think about what I might have done new. In fact, nothing that I remember.

Schenofe · Answer

Hello,  I have the same issue as you.  Facebook now prevents me from posting in a group or joining one, yet messages continue to be posted! Facebook then removes them immediately, notifying me.  If anyone has found a solution, please share it with us!

Mapi · Answer

Hello,  I am suffering from the same issue as you, and I am on Ubuntu for my computer and Android for my phone.  I have changed my passwords on Facebook and on the email linked to the account. I deleted the Facebook app from my phone, but it still published today. I removed the apps via Facebook that request permissions, etc. I modified the group settings, but it doesn’t change anything. I ran antivirus/malware scans on my phone and computer, and they are clean.  On my phone (which I had reset two or three days before all this happened): Instagram, Messenger Lite, Photo Editor, Galaxy Apps, Google Play Services, and YouTube. Well, okay, at one point I might have tried Tinder Lite haha.  I do not remember installing any other apps since then.  Maybe it would be interesting for you to share the apps you use here?  Let’s keep our hopes up.

Sy · Answer

Hello, Until now, my posts were made while I was logged into Facebook on the computer (Windows). However, there was a post made while I was logged out... Yet the app is not installed on my phone. Just Messenger... Temporarily, I've unsubscribed from all my Facebook groups, except for one that I manage.  I checked yesterday the programs installed on the day the problem occurred. Only one matched. I deleted it yesterday and I had posts again today...

aelita21 · Answer

Hello, like all of you, I've been having the same virus problem for almost a month now. My PC is clean, and I've disabled all the applications. The message has reappeared this time offline (I thought it only happened when my session was active...)  Anyway, I don't know what to do anymore...

FaYkeOne · Answer

Hello, same issue here. Personally, it started when I connected to the internet in New Caledonia in Nouméa! I installed the latest version of Mozilla, and if I remember correctly, it probably started acting up around that time :/ I also have a new phone, Wiko, I don't know if that's the problem, I removed FB and Messenger from the phone. And like everyone, I've done all the antivirus, malware, CCleaner tests, etc., and it's all clean. Could trying Chrome change the situation? It's annoying, I'm getting banned from some important groups...

Luffy569 · Answer

Resetting your devices :)  --

mecquinaplusfb · Answer

Maybe a solution: I reset my iPhone (Erase all content and settings) and I haven't had the problem for 24 hours. (I had done everything on my computer and when I logged out of FB on my PC it continued, so I thought it was the phone!)  I'll let you know if it's a false hope! ;)

RuleOfRose · Answer

I haven't had it for two whole days. Here's what I did: Logged out on all devices. When I logged back in, I got a Facebook message saying I might have been a victim of phishing or something like that. After that, there were a bunch of steps, and I set a more complex password. From now on, I log out every time. It might just be a coincidence, but I still don't have it for the moment. It could also be something from Facebook.

Blue-castle · Answer

Hello, I have exactly the same problem as all of you, with posts on the Facebook groups I belong to, offering to sell an iPhone X. I have been hacked 3 times, the first time on November 22 (I was logged in), the second time on December 10 (also logged in), and the third time yesterday, December 15, but this time I was not logged in. I followed all Facebook procedures, changing my password, enabling two-factor authentication, connection alerts (which don't work), I scanned my computer with Avast, CCleaner, AdwCleaner but everything is clean... But I think that if my computer had been infected, it wouldn't just be Facebook that was hacked.  The only thing I noticed is that a few days before my first hacking, a window in my browser (Firefox) opened by itself and activated an application (HTC Sense) linked to Facebook by allowing the connection to my account. At the time, I went into the Facebook settings and disabled "apps, websites, and plugins" thinking that would solve the problem. But I still got hacked. For your information, I only use Facebook on my computer and I only have the Messenger app on my phone.  I noticed yesterday that when you go into Facebook's personal history, there is the "Apps" filter on the left with all the applications linked to your account. Which seems strange since I've disabled the apps in the Facebook settings! And there, surprise, the "HTC Sense" app is part of the list and in addition, it states that it can post on my behalf to "Public". So, the only action we can take is to set it to "Only me". I still suspect this app to be the source of the posts on my account. The only problem is that we have no power over third-party applications on Facebook, and they themselves say that we need to contact the developers of the apps to disable the link. Except that in this case, I do not have an HTC Sense account and therefore cannot do anything.  So that's my problem, and maybe a start to the solution?  Thanks to those who are looking into the problem.

Mapi · Answer

Re,  Well, I had removed Facebook from my phone but it still posted anyway.  I don't know anything about it, but just in case, I'm going to remove Messenger Lite since it's pretty much the only thing still linked to Facebook.

ArnaudduanrA · Answer

Hello,  Same for me... I've tried a lot of solutions:  - The basics: changing the password + logging out of all devices  - Logging out of all applications  - In the settings: stopping the use of Facebook as a platform (I thought it would work...)  And it's posting right now!!  I put Messenger back on my phone, I just removed it again and we'll see.  I'm starting to think it's my PC, or more precisely my browser. But I'm not really sure how to tackle it.   Otherwise... I'm starting to think it might be the perfect opportunity to cut Facebook for good.

Malekal_morte- · Answer

Not very convinced about the web browser, but if you want to give it a try. After that, just turn off the computer for an afternoon to be sure.  Reset/Repair the web browsers affected by the issues:  Repair Mozilla Firefox (first paragraph)  Repair Google Chrome (only the first paragraph).  or  Google Chrome: Reinstall Google Chrome properly by following this procedure exactly: Repair and reinstall Google Chrome properly (If you have a synchronized account, read the next paragraph).  Firefox: Reinstall Mozilla Firefox properly by following this procedure exactly: Repair and reinstall Mozilla Firefox properly   Please press a key to continue the disinfection...

Dude23kk · Answer

Hi everyone, so I've done everything that was recommended, I don't have any more apps, I got rid of Firefox to see and remove the malware (apparently) the messages reappeared yesterday afternoon and in the connection log, now it went through Chrome since I had a Chrome connection just before ...  So, I already know that it must come from my PC but apart from that, I don't see what else I can do ... I had posted the FRST reports, apparently nothing abnormal ... C  It's very very annoying

_Sonic_ · Answer

Hello, I personally uninstalled Mozilla Firefox to use only "Safari" (on my Mac and my iPhone). I was fine for 5 days, I believed it, but no...! It started again last night and this morning. I really don't understand, it's hellish, I don't know how to put an end to it, except for deleting my Facebook account.

Mapi · Answer

As of January 1st, it's back after 2 good weeks of peace.I will proceed to reboot my phone today.In any case, we shouldn't celebrate victory too soon haha!Anyway, let's keep the faith.

Marion · Answer

Hello everyone, I am going through the same thing as you for over a month now. I am also living a nightmare since my account is purely professional. It’s comforting to be somewhat supported in your company.  I’m therefore contributing my situation to help find the cause of the problem. I was using Mozilla and the posts in the groups began. I indeed had the HTC Sense application installed, I uninstalled it but it didn’t change anything. After installing malwarebytes, Avast, CCleaner, changing passwords, strengthening the security of my FB account, uninstalling Mozilla, using Chrome instead, nothing changed. So I deleted my Facebook account to create a new one (as I mentioned, I have a professional account that I need daily). I was fine for 3 weeks, the time it took for my old account to be deleted, then it started again. So from my experience, deleting a Facebook account did not solve anything.  I want to point out that I have a Mac computer and a Huawei phone. Last week I formatted my phone but it didn’t change anything. Maybe I should format the Mac?  I also had some changes in the messages, at first it was phones linked to HTC Sense I believe, and now only iPhones.  Feel free to reach out if I can shed more light on my situation, and I will happily follow your progress.  I will end with a question: where can I write to Facebook to report the issue? I haven’t found any address.  Thank you all and see you soon.

Jay · Answer

Hello, I just did a full Avast scan and it couldn't verify some files when looking at the detailed report. Considering that some have the same name and are found in my Steam AND Mozilla AND Chrome, I'm going to see if deleting them changes anything. Let me know if you find them too  C:\Users\(insert name)\AppData\Local\Temp\tmpaddon-3915c1 (inside there is a widevinecmd.dll.lib that we can't see) C:\Users\(insert name)\Appdata\Roaming\Mozilla\Firefox\Profiles\(your profile name)\gmpwidevimecmd C:\Users\(insert name)\Appdata\Local\Steam\widevine  Since it doesn't seem to be preventing the apps from working, it's worth a try. Run your antivirus and see if it tells you that it can't scan certain files. Personally, it told me they were corrupted.

mpuissance4 · Answer

Hello  Why not try this https://www.facebook.com/help/389666567759871?helpref=search&sr=1&query=facebook+infecter I did this for a friend and she no longer has message sending issues from her account Analyze your device. Our partners offer various tools to help you analyze and clean your computer or mobile device:   ESET  Best regards   -- Time heals all wounds, even if it doesn't spare us a few scars.*^_^*.

Mathou67 · Answer

Hello everyone!  I am so relieved to see that I am not alone with this problem that started for me at the end of November. People in the Facebook groups where I post can sometimes be a bit harsh and don't understand that there is no solution to this problem. I had to leave my swimming and college group, which is really inconvenient...  For my part, I have maximized my Facebook security, I have disabled the app platform, I have uninstalled and reinstalled Firefox, and run several antivirus programs without success.  On the day of my first malicious post, Facebook informed me that the HTC Sense app had just been installed on my FB. However, I cannot find it anywhere, except in "Settings - Personal History - Apps," but I can't change anything there.  I should note that I use Mozilla Firefox, Messenger on my iPhone, and also Facebook on my iPhone, where I am continuously logged in. The messages are also posted when the computer is off.  Good luck to everyone!

Damned_03 · Answer

It started again for me earlier, nothing works (even after resetting the phone and having no apps except for the basic android ones). Has anyone here ever contacted Facebook? Because if so, I'd like to get their message to send it in turn. Otherwise, I will probably make one this weekend. Good luck! :)

lioda78 · Answer

Good evening everyone, like you, I've been dealing with this Facebook account hacking issue with an iPhone X for 3 weeks... Like most of you, I've set my FB account with maximum security, and that hasn't changed anything. I had considered deleting my Facebook account, but when I see the results, I don't believe it would be useful. Unfortunately, I'm only here to share my experience, without having any solution myself. I hope one of us will find a solution, as this is really frustrating (I had to leave all the groups I was part of, just to avoid polluting them...) Catch you later!

saammmm · Answer

Hello,  I have the same problem as you, maybe my testimony can help move things along.  I believe it started in November, with posts in all my groups (all at the same time each time). I then got banned from some groups and left the others. Except for one which I use as a "test"; my friends in that group certainly don’t miss the chance to tease me.  As for my different Facebook sessions, I have one at home on my PC that stays open, but my PC is only on in the evenings between about 7 PM and 11 PM. And I have a session that is open at the office during the day, but I log out every evening.  I don’t have a smartphone, so no Facebook/Messenger on my phone or tablet. As advised earlier, I have revoked access to apps, websites, etc., in the settings. And like some, the HTC Sense app is present in "personal history", "apps".  After numerous attempts (changing password, email address, reinstalling Mozilla), I'm a bit out of ideas.  Hoping that by combining our experiences, we can find out where this "virus" is coming from.  See you soon, Sam

Malekal_morte- · Answer

Apparently a new wave of spam with Google codes px256gog: https://forums.commentcamarche.net/forum/affich-35172001-virus-ipx256gog  -- Please press a key to continue the disinfection...

Gwenn · Answer

Hello everyone, My mother has the same issue as you. She does NOT have a smartphone, she only connects with her computer, using Mozilla. And the Facebook security settings have no effect on it, so I think it comes from the computer... We also uninstalled HTC Sense from her Facebook apps, but it keeps reactivating itself each time without her doing anything for that. And with each reactivation, it posts in her name (sometimes more than 3 weeks later). She believes it started after clicking on a link that asked her to update Adobe Flash Player to watch a Facebook video (or maybe after a Firefox update).... For your information, generally, no one else uses her computer. Question: if some people use multiple accounts on the same computer, does it post on all accounts? And is the HTC Sense application activated on all accounts that post such messages? Thank you in advance for your responses. In the meantime, I will try other solutions and keep you updated!

QQ · Answer

A response that was posted on another forum about this issue and which I hope will help us resolve it. I just did the manipulation:  "Hello,  Just for information, and if it can help others: the problem ultimately came from a rogue Firefox extension, which had nothing to do there and that installed itself under the name of Adobe Flash Player (but it has nothing to do with that application). So to permanently get rid of (at least I hope) those spam posts in your Facebook account, you just need to go to the Firefox menu, then Add-ons, then Extensions, and if it’s there, disable it. It’s quite radical (in any case, for me, it stopped the problem dead in its tracks, which was becoming increasingly invasive), and it avoids having to completely repair Firefox (which I would have done otherwise).  So, this time I’m closing the topic.  Thanks again for your help and perhaps see you soon,  Lady M."

Mathou67 · Answer

Hello everyone,  Problem solved for me since a month ago when I completely uninstalled Firefox from my computer and downloaded Google Chrome instead.  Hoping I could help you!!

Charlie · Answer

Good evening, I would like to bring this topic back up to propose something that seems to be, for now, the only solution (that I found after searching for a long time, but I stumbled upon it by chance in an article): https://korben.info/un-conteneur-firefox-pour-emprisonner-facebook.html  I installed this small module on my Firefox browser, and since then I haven't had these pesky posts in groups (the few groups that hadn't kicked me out because of this issue, specifically). We'll see over time if it lasts, but there you go, I recommend doing this.

Tchalla7 · Answer

Hello!  Like everyone else on this forum, I've had the same problem. This issue started about 3 weeks ago. Then it happened every week after that. I think the problem appeared when I started logging into Instagram. Just so you know, I have a Samsung A3, and I think the phone plays a part in this. I have a strong feeling that it's certain apps on the phone that are posting these messages.

gwen · Answer

Hello, Like everyone else, I have this problem that started around November... I deleted Facebook and Messenger from my phone, and then I completely reset it. I was fine for several months, until early April when it started again... So I reset my computer (not having put anything back on my phone), I was on Firefox before, so I changed it up and switched to Opera (including changing my email address and password), I had three or four days without anything and today, it posted in my groups again... It's frustrating and I don't know what to do anymore because like you, I've noticed that when you go to personal history, you find a number of apps that can post in my name (including HTC Sense...), I made sure that I was the only one who could see it but I'm not sure it makes much of a difference, if anyone has any new ideas...

spectralKnight · Answer

Is it still ongoing right now for those who couldn't shake it off? I haven't had anything since April 5th.

Allison · Answer

Well... After reading your messages, I'm at the bottom of the pit O__O I've had the same problem for 2 weeks with (little bonus) the addition to groups on top of that! At first, I didn't realize, I was seeing messages from members of groups I didn't know. I looked closer, "Hey... But I don't remember asking to join this group. I must have accidentally done something" and I would leave the group. It was always groups related to my hobbies (video games, movies, Disney, etc...) so I didn't make the connection. Then the messages started, first iPhone then Samsung. That's when I realized that no, I wasn't going crazy, the groups were indeed requested but not by me. Since then, I've: - Changed my FB password - Turned off my tablet - Fixed Firefox and only installed AdBlock on it - Reset my phone (but with my Play Store account which updates my apps, I'm not sure how useful that was...) - On FB, I can't see this HTC Sense app and yet I've searched everywhere. (even going into the history and clicking on the "more" of apps) - Today I cut off my apps' access to FB.  I'll see how it goes...

Lokian · Answer

Hi!
I'm not sure, but I think it's about app permissions on FB. Check it out, but there are certain apps you accept that have the ability to send messages on your behalf (like Spotify or Allociné, for example) (but fortunately, the vast majority of apps don't have this option XD).
When you go to Settings > Apps and websites, you click on the app and scroll down to "THIS APP CAN" and you need to uncheck "Post" (like this > https://i.imgur.com/9thlFrW.jpg)

Hoping that this pesky thing will be completely eradicated one day x)

I don't know if that's actually the problem, but in any case, since I did that, I was able to get rid of that cursed virus xD.

EMerle · Answer

Hello! It's quite unfortunate that this issue is considered resolved when it really isn't. As for me, it's been several months since I've deleted all the apps connected to Facebook and the problem hasn't really calmed down: a bit at first, but not so much in the past few weeks. So in Settings/Apps and Websites, there’s nothing left, and the problems continue... Has anyone actually found a real solution to this mess?

punk52 · Answer

Hello, I have the same problem. Have you found a lasting solution?

isthgoo · Answer

Hello, is this discussion thread still active? I have FRST files to submit. Thank you.

Facebook account hacking with iPhone X links - Page 3

Texture issues in enshrouded

Big fish games are they worth it?

Saracroche: the effective french app against phone spam

How to get the character µ on the android keyboard.

Access issue to my "contact me" profile

Windows spotlight is not working.

Black screen digital camera

Connecting rj45 cable with fiber

Sony bravia tv red led blinks 4 times

Free: associating with the freebox server in progress