Earlier quoted context omitted.
SMS 2fac to a google voice account with 2 fac
Still not secure.
Why ?
My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
111–120 of 262 posts
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#112>It's possible they deep-faked her videos ahead of time but it seems like something you'd only spend resources on only if you knew the attack was successful. I wonder if they had a list of account credentials, tested to find ones that worked without changing anything after verifying they were legit, and then once they had the content ready took over the account to ensure the work they had done was live for as long as…
This is a good tack, though the key is the gmail account. Presumably, the perp has multiple scams based on the content of the account.
Presuming much of the media creation is automated, they could also have run the process once the gmail account was owned.
Testing auth from unexpected locations in advance seems like an easy way to get noticed.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#113Instagram is a dumpster fire. I have a 3 letter instagram name and the amount of spam and attacks I get is insane... I get hundreds of password reset emails from instagram daily and constant DMs and follow requests from scammer and bot accounts. I've tried contacting instagram about it several times but they never respond. Had to blackhole emails from security@mail.instagram.com to prevent my mail server filling up.
I'm glad to know I'm not the only one who gets hit with password reset attempts. It's strange because I don't have a short username; mine is noticeably long and weirdly specific.
I've noticed that the reset attempts seem to come in waves. I haven't charted it, but sometimes I'll get somewhere between 20-30 reset attempts in 24 hours, and at other times, I won't get any reset attempts for a full week or so. The whole thing is very bizarre.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#114Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#115Earlier quoted context omitted.
I've been on voice chat with her throughout the day trying to help her fix the problem. So I've seen it happen in real time, from the suspicious login in Nigeria to the deep-fake video that happened later.
It's so very hard to believe that it would be the notoriously unsophisticated Nigerians¹ pulling off high-end deepfakes. These guys weren't smart enough to use a proxy, but were supposedly smart enough to produce a good deepfake. If this really happened, there must be some easy to use public tool they used. I'd really love to see the video. ¹ There's no way anyone else would log into a stolen account from a Nigerian…
Maybe this is related https://therecord.media/how-the-pandemic-pulled-nigerian-uni...
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#116Are you sure it’s a deepfake? A common version of this scam involves extorting the hacked user to record a video in exchange for getting their account back.
I don't know the details of OP's situation and there seem to be other people popping up in the thread with corroborating claims. But if anyone is interested, here are details on the extortion scam where the victims are made to record the video themselves.
https://www.vice.com/en/article/93bw9z/bitcoin-scam-hostage-...
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#117Now I'm really curious if you could share an example of these deep fakes... with your friend's permission of course. Maybe with a disclaimer: THIS VIDEO IS A DEEPFAKE.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#118frankly, i think this is where decentralized networks can help us. 1. networks where global reach to total strangers is not even possible, or at least is not the default. the vast majority of people only really want to reach their “friends of friends” anyway. this eliminates a lot of would-be hackers from even knowing you exist. 2. accounts that are unhackable because users log in with private keys instead of user/pa…
> 2. accounts that are unhackable because users log in with private keys instead of user/pass
There's nothing magical about private keys that prevents them from being lost or stolen.
The average person doesn't want to manage private key files. The average person wants to be able to recover their account if they forget or lose their password. Moving to private keys isn't a realistic solution for logins for the average person.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#119I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…
Fortunately, that's not something the current company Meta would allow to happen. That sounds like something that only Facebook would let fall through the cracks.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#120The best thing you could ever possibly do is to block all facebook products in your household. It's really quite easy these days