I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…
My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
121–130 of 262 posts
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#122I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…
Probably inside job at IG tbh. Multiple reports over the years of desirable IG usernames being taken from legit users and handed to the friends of IG employees
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#123Earlier quoted context omitted.
Still not secure.
Why ?
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#124Crypto lockers, pump-and-dump schemes, scams, hacking processing power for mining, burning fuels to power even the most legitimate uses.
Cryptocurrency will go down in history as the most regrettable invention since leaded gas.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#125>It's possible they deep-faked her videos ahead of time but it seems like something you'd only spend resources on only if you knew the attack was successful. I wonder if they had a list of account credentials, tested to find ones that worked without changing anything after verifying they were legit, and then once they had the content ready took over the account to ensure the work they had done was live for as long as…
This is a good tack, though the key is the gmail account. Presumably, the perp has multiple scams based on the content of the account. Presuming much of the media creation is automated, they could also have run the process once the gmail account was owned. Testing auth from unexpected locations in advance seems like an easy way to get noticed.
>Testing auth from unexpected locations in advance seems like an easy way to get noticed.
How many times we've received emails from online accounts notifying about login attempts? They are usually phishing attempts, but it occurs enough that most people don't believe the legitimate emails.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#126I have two Instagram accounts: one where I post things about me, other where I post things about this sport I practice. I lost the password for the later account, it was a nightmare to recover. The two factor SMS code would never come. When it would come, the app reported an error. I had to battle the app and the web platform for 2 days in order to get my account back. I cannot imagine the kind of hustle it would be…
I smiled a little bit when you say struggle for a whole 2 days. In one of those "get off my lawn" moments, I remember having to send in letter head printed requests via snail mail to take recourse. At the time, the small biz had never printed anything more formal than an invoice, so there really wasn't a letter head. Some of the work around procedures are just farcial when they are there, yet just down right infuriat…
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#127Earlier quoted context omitted.
Wow. I have an early Twitter handle and they let me turn off password resets without additional information. (I think you have to enter the email under which I've registered before it will send the request.)
How early? My main is in the first 12,000.
https://twitter.com/settings/security
Turn on "password reset protect" and it will require "either the phone number or email address associated with your account in order to reset your password". I'm not sure it adds a ton of security, but it definitely cuts down on the password reset emails.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#128Earlier quoted context omitted.
I have another, stop using those websites completely. Delete your accounts.
What if your target demographic is on those sites, and/or you use Instagram not for fun/entertainment but for business purposes because in this age >90% of your target audience is there and very few are going to visit your website in this age? Many people aren't fans of Insta/FB but they need to use it for reaching their audience.
If you use Instagram and then your account gets taken over, it might be convenient to be able to alert at least some of your fans by posting about it on Tiktok.
Better yet, even if few of your fans are on your official site, having an official site means you're not 100% locked out of your own identify when your Insta is taken over.
Of course maintaining a website is probably not the forte of most Instagram hot-shots, so this is by no means an easy solution.
It's unfortunate that these big social media companies let people become successful without fully understanding what they're up against after reaching a certain threshold.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#129The technology does not exist. Even Hollywood struggles. "Roadrunner: A Film About Anthony Bourdain" took 4 companies and months to do voice, AND once you know it's a deep fake you can tell. It's still tinny, but you would not notice without knowing.
At best deep fake pictures taken from researchers have been used for profiles in the wild.
You can see heaps of hostage videos here - https://www.google.com/search?q=%22I+just+invested%22+site%3... which is probably what it is.
There's not enough info from this report to check exactly what happened.
Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours
#130Can anyone guess what exactly the hackers want with a particular person's IG? Why don't they just auto/synthetically generate a fake face if they just want to sell or scam something? Is it to exploit the person's friend network?