Live data from Hacker News

My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

news.ycombinator.com

71–80 of 262 posts

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#71
post #55
post #51

Earlier quoted context omitted.

It's so very hard to believe that it would be the notoriously unsophisticated Nigerians¹ pulling off high-end deepfakes. These guys weren't smart enough to use a proxy, but were supposedly smart enough to produce a good deepfake. If this really happened, there must be some easy to use public tool they used. I'd really love to see the video. ¹ There's no way anyone else would log into a stolen account from a Nigerian…

Why would Nigerians be unsophisticated? Are you assuming someone from Nigeria wouldn't be smart enough to make deepfakes?

I think you can ask anyone working with threat intel about this. Nigeria has the least sophisticated cybercriminals in the world, they're very prolific but the tooling they use is hilariously bad.

I'm sure there are some exceptions, but those would probably be smart enough to conceal where they came from.

This isn't really surprising. Obviously Nigerian cybercriminals will be less sophisticated than the Russians for example, just look at their schools!

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#72

I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…

Was it SMS based 2fa or did you use some other method?

SMS 2fac to a google voice account with 2 fac

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#73
post #55

Earlier quoted context omitted.

Why would Nigerians be unsophisticated? Are you assuming someone from Nigeria wouldn't be smart enough to make deepfakes?

Right? Their prince was the first email scam of note, and probably one of the longest running ones at that. Also, you know VPN/VoIP numbers exist to help mask the identity/location of scammers. Just in case some of that might have slipped the mind of some peeps.

Nobody would choose to use a Nigerian VPN while logging into stolen accounts. This is really obvious.

> Their prince was the first email scam of note, and probably one of the longest running ones at that.

And all of the Nigerian prince spammers are incredibly unsophisticated. Anyone in the industry can tell you this, you can just look at the manner in which they send their emails.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#74
post #41

I was doxxed and harassed for my Insta account. Eventually one day it was just taken even though I had 2 factor auth on Insta and email. There is basically no recourse. Oh and it was given to one of mr beasts (from YouTube) helpers…

This account? https://www.instagram.com/chucky/ Are you sure the account and username were given and not just the username?

Account was deleted and user name handed over

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#75
post #28

Example from a news story. After seeing the video, I must admit I’m not sure if I believe the guy or not, which is scary. Edit: Better link from deadmutex below - https://www.youtube.com/watch?v=vqr0oER03SE https://www.wfla.com/8-on-your-side/better-call-behnken/inst...

Telling that a major news outlet can't get anything more than a "we're looking into it" response from IG support.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#76
post #40

frankly, i think this is where decentralized networks can help us. 1. networks where global reach to total strangers is not even possible, or at least is not the default. the vast majority of people only really want to reach their “friends of friends” anyway. this eliminates a lot of would-be hackers from even knowing you exist. 2. accounts that are unhackable because users log in with private keys instead of user/pa…

>the vast majority of people i think the concept of followers shows that your premise isn't exactly true and people with more followers than just family, friends, and friends of friends is also another clue.

“friends” in the term “friends of friends” refers to followers

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#77

Facebook doesn't seem to care about deepfakes on Instagram since they promote "engagement". I can't say I have too much advice other than to always use strong passwords, don't share passwords across sites, use VPNs on public routers, and stay away from posting videos of yourself on cancerous engagement metric-driven social media.

I have another, stop using those websites completely. Delete your accounts.

Re: My friends Instagram was hacked and deep-fake videos posted in less than 6 hours

#79
>It's possible they deep-faked her videos ahead of time but it seems like something you'd only spend resources on only if you knew the attack was successful.

I wonder if they had a list of account credentials, tested to find ones that worked without changing anything after verifying they were legit, and then once they had the content ready took over the account to ensure the work they had done was live for as long as possible..

Post reply on HN