I Got Hacked in an Unusual Way | Tips to Protect Yourself

Ғылым және технология

You may have noticed that our KZread channel got hacked 2 weeks ago. KZread was actually one of four hacking incidents and none of them resulted from a fishing attack where you click a link or by downloading a file containing malware, nor did the hackers know our usernames or passwords.
LEARN MORE
===========
🏫 LEARN MORE in my Excel courses: bit.ly/courses240220
📰 EXCEL NEWSLETTER - join 450K+ subscribers here: www.myonlinetraininghub.com/e...
🎯 FOLLOW me on LinkedIn: / myndatreacy
💬 EXCEL QUESTIONS: Get help on our Excel Forum: www.myonlinetraininghub.com/e...
⏲ TIMESTAMPS
==============
0:00 What accounts got hacked
0:15 When everything happened
0:52 How this happened & recovery process
8:07 How you can protect yourself from hackers
9:14 Important note for our customers
#KZreadChannel #CybersecurityInsights #Cybersecurity

Пікірлер: 1 200

  • @MyOnlineTrainingHub
    @MyOnlineTrainingHub5 ай бұрын

    ❓Do you know any other methods hackers can use to hack accounts?

  • @jonr6680

    @jonr6680

    5 ай бұрын

    Thinking about the credit card, no idea but it occurs to me that the dark web is swimming in stolen data collected over years from various sources. And hackers are not acting alone but a network. So that short delay was presumably used to cross match your logins to maybe a previous card hack? Forensics at the airport would reveal a list of accessing devices, I mean one bad guy was literally sitting in range, right? No idea what police are/would /could /should do, or the multiple organisations starting with BA, airport owners, WiFi provider etc, even the Swiss authorities?? Also starts to implicate the status of literally all your PC files (if accessed via public wifi). I know my own data is not locked down if someone got on to the pc... Also my opinion of Airbnb hosting is jaundiced after a bad experience... So I wouldn't even trust those guys particularly. Crims think foreigners, travellers, tourists are easy prey. To an extent, they are right. Tired & rushed is no good for awareness.

  • @DataVisualisation

    @DataVisualisation

    5 ай бұрын

    If I knew this, I'm a hacker and wouldn't tell anyone.:-) The "normal" user has no idea what is possible or what is happening or has happened to his account.

  • @pbrigham

    @pbrigham

    5 ай бұрын

    How did you pay for the WIFI in the Airport? With the credit card ? or you use the credit card when you were on the compromised wifi in the Airport ?

  • @Jo-go3px

    @Jo-go3px

    5 ай бұрын

    SIM-Swapping. So it's better to use TOTP instead of SMS as the second factor. Keep Antivirus and OS and installed Software up-to-date

  • @nortonemesis

    @nortonemesis

    5 ай бұрын

    @@pbrigham most airports give you free wifi

  • @hugeslacker
    @hugeslacker4 ай бұрын

    its criminal that these social media companies don't provide adequate support for their customers/partners. Imagine a car dealer having no phone number, no manager... or any other type of business.

  • @adrianTNT

    @adrianTNT

    4 ай бұрын

    That shows up very clear what their priorities are. It is also somehow arrogant, like you are not allowed to disturb them. Google especially. They also do not want to spend any money to hire people that answer requests.

  • @hugeslacker

    @hugeslacker

    4 ай бұрын

    @@adrianTNT I had a trick to be able to talk to facebook support... buy advertising and then you have the option to chat with a real person, and then they indefinitely suspended my advertising account saying policy violations (I don't violate any policies) LOL

  • @grantcivyt

    @grantcivyt

    4 ай бұрын

    Internet companies are operating at a scale that is totally unlike your local car dealer. This comparison is unhelpful.

  • @jayrowe6473

    @jayrowe6473

    4 ай бұрын

    @@grantcivyt Your response is beyond "unhelpful".

  • @TheStevenWhiting

    @TheStevenWhiting

    4 ай бұрын

    It would be criminal if you paid for it, but none of us do, so can't really complain.

  • @MN_Fan
    @MN_Fan5 ай бұрын

    I'm so sorry you experienced this terrible situation. Thanks for posting such a wonderful summary as it may help others in the community from suffering a similar fate.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I hope so 🤞

  • @TheFman2010
    @TheFman20104 ай бұрын

    Although the extra steps necessary to secure our accounts are inconvenient and time consuming, trying to recover a hacked account is thousands of times more inconvenient. Your tips are spot on.

  • @davk
    @davk5 ай бұрын

    Hi Mynda. I am sorry for what happened to you. Google is still not secure. Another large YT channel was hacked last year (Linus tech tips) and they highlighted the absurd allowing you to delete your videos or rename channel without being asked to retype the password again!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Yeah, it’s madness that they allow changes like this unchallenged!

  • @evantaur

    @evantaur

    4 ай бұрын

    On LTT's case they got the session cookie from an employee who got tricked into opening an executable posing as PDF because he taught it was from their sponsor. accessing settings SHOULD ALWAYS ask for password, and yeah good luck contacting anyone from google.

  • @colwerner1973
    @colwerner19735 ай бұрын

    Brilliant Mynda, you turned an unfortunate/stressful event that happed to you into a positive thing for our community whereby more good will come from it than your bad experience. Thanks for sharing to this level of detail.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I hope so ☺️

  • @drumcatnau
    @drumcatnau4 ай бұрын

    Alternate theory: You connected to a spoofed public wifi, and all your traffic was watched. In addition, there's more to this because it seems odd that they're trying to make charges in your home country, yet stole your information on the road. An anti-virus application won't tell you about a "legitimate" remote connection. You should be checking your Windows logs for connections from other machines. Regardless, public wifi is something you have to validate carefully. Key is when there is no password.

  • @trail.blazer

    @trail.blazer

    4 ай бұрын

    Yep, this is likely the method. Everything is spoofed (DNS/SSL/etc.) and the attacker has unencrypted access to everything. Attackers carry the equipment in bags.

  • @themartdog

    @themartdog

    4 ай бұрын

    Yes, this is my thought too. When they connected to the airport wifi, they probably accepted a certificate from a spoofer without thinking about it. This allowed them to decrypt all their network traffic.

  • @nikkopt

    @nikkopt

    4 ай бұрын

    @@trail.blazer Although i believe this was indeed the method they used to get what they wanted, SSL spoofing is hard as you can't simple create a fake certificate and hope the browser will accept it. They probably just stripped SSL altogether and the user didn't notice it was using an http connection since most browsers no longer show a big red warning when you visit an insecure website.

  • @nikkopt

    @nikkopt

    4 ай бұрын

    @@themartdogthankfully you can't accept CA certificates that way. There is no way to make a browser download and install one. Nor a wifi connection. You need to manually add them yourself.

  • @jxtq27

    @jxtq27

    4 ай бұрын

    No, this is not possible. KZread uses HSTS, so a passive observer or even a man-in-the-middle attack cannot reveal any information. Even a state-level actor, like China or the United States, wouldn't be able to do it.

  • @marving2481
    @marving24815 ай бұрын

    I am sorry you went through this. All I can say is be strong and keep pushing because there is an entire global community that is thankful for your work. Thank you for sharing this too. It opened our eyes as to how crazy things can be

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I appreciate that 🥰

  • @motorcycleman6898
    @motorcycleman68985 ай бұрын

    I'm sorry that this happened to you. Thank you for posting this video that has converted a negative experience for one into positive outcomes for many.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I hope so 😊

  • @CruelViper88
    @CruelViper885 ай бұрын

    8:22...you can save your phone battery if you go for the Tethered option instead of the wireless option. You do need a USB cable to connect your phone with the laptop/pc. But it's more stable then wireless.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Good to know. Will give that a try too 👍

  • @F85C8CE2A7831FE68C63

    @F85C8CE2A7831FE68C63

    5 ай бұрын

    This is also much more secured than the wireless option. With WiFi a nearby attacker can masquerade as your hotspot and trick your laptop into connecting to their rogue hotspot instead of your phone's. This happens every year at DEFCON in Las Vegas, almost as a joke on the uninitiated.

  • @ironicdaemon

    @ironicdaemon

    4 ай бұрын

    Yes agree - when using my phone's data on my laptop I find it is always better to plug it in via USB rather than use WiFi. As a plus, the phone stays fully charged.

  • @imark7777777

    @imark7777777

    4 ай бұрын

    @@F85C8CE2A7831FE68C63I've heard that DEFCON has gotten a little bit more responsible not much but a little bit. I am also curious about the masquerade as your Wi-Fi APs. I hear about this all the time but I have yet to have my suspicions confirmed. Sure I can clone the name, but is the Wi-Fi standard that brittle to fully be able to clone the password to? Granted the standard isn't open so we see lots of problems with it because we wouldn't want Open researchers to suggest fixes before we put it out in the world and burn it into hardware. It just breaks my brain to think that with an AES encryption key system (implemented properly?) another party would be able to join the conversation without the valid key to decipher it? Although that is completely negated if all parties have joined the conversation due to a password being publicly posted at the desk.

  • @amarpaul_s
    @amarpaul_s4 ай бұрын

    So sorry for the stress you suffered. I’m truly grateful to you for sharing the entire experience and your analysis as it will help everyone gain insight and improve their own security.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @travel-warrior
    @travel-warrior5 ай бұрын

    So glad to hear you managed to recover your website. The scammers have become very sophisticated so thanks for sharing and looking forward to more of your great content

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support ☺️

  • @billt2403
    @billt24035 ай бұрын

    Thanks for sharing. I’ve enjoyed your videos for some time now and appreciated the work content in their production. It must have been heart-breaking to see someone almost succeed in destroying what you’ve built. So glad to know you are back again! Best wishes.

  • @brodriguez11000

    @brodriguez11000

    5 ай бұрын

    Needs repeating, backup, backup, backup. I've seen too many businesses burned because they didn't. Make them and verify them. As for them VPNs whenever one has to connect using WiFi one doesn't control.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support! 🙏☺️ I do have all the videos but re-uploading them from scratch would not be the same as all the video urls would be new. Not something you want. Thankfully Google were able to restore the channel for the most part.

  • @SimonTidd
    @SimonTidd5 ай бұрын

    Wow, scary stuff. I'm sorry you had to go through this. Many others would not have the knowledge and skills to navigate it as well as you did. Thank you for sharing.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much. I hope it helps others avoid a similar experience.

  • @KarlBeeThree

    @KarlBeeThree

    5 ай бұрын

    You beat me to saying almost exactly what I was going to say. Scary stuff, indeed. I could feel my pulse rate climbing from panic just reading the narrative. Great job Mynda, keeping your wits about you under extremely challenging circumstances! I'm not sure I would have been able to.

  • @MarcosRieper
    @MarcosRieper5 ай бұрын

    I'm so sorry you had to go through this. It was terrible. God bless you and thank you for sharing the experience.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support!

  • @mattnyman9933
    @mattnyman99335 ай бұрын

    I am so sorry that you went through this terrible experience. Thank you for being so informative and using the experience as a training for others. I am sharing this video with my peers.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad it can help others be safe. 🙏

  • @ethofmeyr
    @ethofmeyr5 ай бұрын

    WOW! I am so glad that you got the channel back and sorry to hear about the stress!! Thank you. Hopefully this video also saves many others from a similar experience!!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I hope so too!

  • @BasKeurprins
    @BasKeurprins5 ай бұрын

    Also do not use charging ports they offer in airports (use an outlet and your own charger instead). Those little USB "charging" ports can be hijacked by a little piece of hardware that can be collected later - and your charging cable is also a data cable.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Yikes! Nowhere is safe. ☺️

  • @johnmccormick2883

    @johnmccormick2883

    5 ай бұрын

    @@MyOnlineTrainingHub I’ve seen that they sell usb charging cables that don’t have the data conductors connected… just the power connections. I don’t travel much but think I’ll pick some up for all my family members

  • @BlackjackYak54

    @BlackjackYak54

    5 ай бұрын

    ⁠@@MyOnlineTrainingHubThere are tools you can buy that blocks the data. You connect device to the usb data blocker first, then connect that to the power port. They cost about $10-$15 USD on Amazon. Even if you don’t plan on using it, it’s good to have in emergency.

  • @mramsch

    @mramsch

    5 ай бұрын

    Alternatively, make those public charging ports safe by bringing your own 'USB data blocker'. That is a small USB adapter that passes through the charging voltage but blocks any data transfer. So you can be sure to have no USB data connection at all and therefore no risk, just receiving the energy. Another possibility (which I'm using personally) is: use a powerbank inbetween! You'll need a powerbank that is capable of charging your smartphone while being charged itself. My powerbank can do that and so I plug the powerbank into the public charging port, and my smartphone into the powerbank. The powerbank doesn't do any USB data transfers, so I'm safe from USB hijacking, and at the same time I'm charging both my phone and my powerbank, which can be quite convenien and makes the most out of the 'free energy'. :)

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    The powerbank is a good idea. I usually carry one of them with me when travelling anyway, so saves requiring another device.

  • @RaymondHuey
    @RaymondHuey5 ай бұрын

    Thank you for the extracurricular education. So sorry you had to suffer through this. Love your material.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support ☺️

  • @ericcarroll7694
    @ericcarroll76945 ай бұрын

    I have followed your channel for years (I'm retired but still use Excel and enjoy learning about it). It was very kind of you to post this video. Thank you for all you do-I'm glad you came out of this okay. Signed-an old man from Illinois.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much for your support 🙏

  • @barttitulaerexcelbart9400
    @barttitulaerexcelbart94005 ай бұрын

    Sorry to hear this Mynda: please keep yourself strong. Thanks for all the tips in the video.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much!

  • @jonvonderheyden382
    @jonvonderheyden3825 ай бұрын

    Good job uncovering the trail, Detective Mynda. :) This is actually super interesting (and frightening). I'm so glad that the damage wasn't worse.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much, Jon! It wasn't a pleasant experience 😅

  • @anonomyss
    @anonomyss5 ай бұрын

    Thank you for sharing this with us so we're more informed. Really sorry that this happened to you.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad I can help others avoid this experience ☺️

  • @Nic_Holas
    @Nic_Holas5 ай бұрын

    Horrible event. Thank you for sharing and helping us all learn to protect ourselves better.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    You are so welcome 🙏

  • @danish2606
    @danish26064 ай бұрын

    Know this, you have us dear, that's something hackers can not hack, lots of love and respect for you and for your hard work

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks so much for your support ☺️🙏

  • @DavidStringham
    @DavidStringham4 ай бұрын

    People like to blame public WiFi for hackers sniffing web traffic, but that's not what happened unless the hacker had Google's SSL private key and password or a quantum computer. The one practical way of exploiting public WiFi is by redirecting users to phishing pages. It's more likely to be an infostealer that was undetectable.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks, David. I have always felt safe with https, but this experience has taught me to trust nothing. If it was a phishing page, then how did it log me into KZread? I didn't notice anything strange at the time.

  • @DavidStringham

    @DavidStringham

    4 ай бұрын

    @@MyOnlineTrainingHub Hackers often use captive portals with an 'Evil Twin' and/or will spoof login pages of popular sites with spoofed DNS responses if WiFi clients aren't properly isolated from each other.. You connect to what you think is the legitimate hotspot and is actually the attacker's machine. Then an unsecured, unverified page pops up prompting you to login to Google. Someone who doesn't understand such portals might be fooled.

  • @SteelBlueVision

    @SteelBlueVision

    4 ай бұрын

    David is absolutely correct on this. It can only be one of two things, an already hacked system (i.e., laptop) or previously hacked home PC, or user error and/or spoofing to enter credentials of some sort that could later be used. I am of course dismissing the obvious case of the use of an insecure, easy to guess password...

  • @CherryDT42

    @CherryDT42

    3 ай бұрын

    I agree, it can't have been a compromised Wifi due to how HTTPS works. It's not possible to sniff any traffic this way. Most likely you got malware on your computer from _somewhere_ which stole your token and then removed itself.

  • @nickdowling429
    @nickdowling4295 ай бұрын

    Thanks so much for posting this Mynda. My ebay account was hacked last week and they got my private email address and phone number, thankfully nothing more. Repeated conversations with ebay customer 'support' yielded absolutely nothing apart from being told that ebay has a policy of not providing support or help in instances of their users/customers being hacked!! At least you got an apology from google. All the best and many thanks again - my fav channel

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    So sorry to hear that. I did get an apology and pretty good support once I figured out a way to get in contact, which was way too hard. But also, Google allowed this to happen and they really should have better protection when you’ve set up 2-factor authentication on your account.

  • @BillAnt

    @BillAnt

    5 ай бұрын

    ​@@MyOnlineTrainingHub - As you can see 2-factor authentication can be compromised too while inconveniencing the real user... hate those things constantly having to type slews of digits every time I log into an account with 2FA. smh I use unique random passwords for each site (never the same for more than one), and never got hacked in 20 years I've been using the web.

  • @RahulGupta-ig9gv
    @RahulGupta-ig9gv5 ай бұрын

    This is such a scary situation, you have been through. Sorry for you & thanks to you for coming out with the details for others to know.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you!

  • @michaelkoster8412
    @michaelkoster84125 ай бұрын

    Very sorry you experienced the worst of society. You are so knowledgeable. Thank you for sharing all this information with us.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much! ☺️

  • @CoolJosh3k
    @CoolJosh3k4 ай бұрын

    1. Most every site, especially those handing sensitive information, already use end-to-end encryption. Not only is this better than what a VPN can do and makes the VPN pointless, but in the extremely rare case where you send sensitive information over an unencrypted channel where a VPN’s encryption *actually does* do something helpful, you’ve likely got bigger problems that a VPN is giving you a false sense of security about. 2. Malvertising is a possible way this could have happened. Just allowing an ad to load, thus running some third-party’s code, you have the threat of a serious zero-day exploit being used against you. 3. Even the best anti-virus can still miss stuff.

  • @stanst6092
    @stanst60924 ай бұрын

    Even though you think there is no malware on your devices, it looks like client side session interception. Other people explained why it is unlikely in public wifi spots. But its worth mentioning that its not impossible. Having control over network and persueding you to install fake CA certificate, allows an attacker to hijack https encryption. What is important here, these two elements do not have to happen at the same time. CA certificate could have been provided much earlier, so you did not notice. Another possible attack vector is via browser plugin. Meny of then have a lot of proviledges and if such plugin is not malicious itself, it can be vulnerable to attack.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Yes, the CA certificate is a possibility. I don't recall accepting one, but that's not to say it didn't happen.

  • @mLyonJE

    @mLyonJE

    4 ай бұрын

    @stanst6092 .. Yes, thanks for this - exactly what I thought of the comment about public WiFi, really appreciate your more detailed remarks here.

  • @barrynoonan7712
    @barrynoonan77125 ай бұрын

    So sorry to hear that Mynda! Thank you for sharing such detailed tips and information. Hope you and your family are ok!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support ☺️

  • @abrammakgalemele3491
    @abrammakgalemele34915 ай бұрын

    Lots of love you Mynda. I will listen to this again and make notes. Glad your now safe. ❤

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad I can help you avoid this experience 😊

  • @ErikBrown1000
    @ErikBrown10005 ай бұрын

    I'm sorry your husband and you had to go through this. Thank you for candidly sharing your experience with us and offering thoughts on how this happened to you and how we can avoid a similar situation. Keep up the fantastic content.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much! Will do 😊

  • @user-tj6fq7fr5s
    @user-tj6fq7fr5s5 ай бұрын

    Oh dear! It’s awful that this happened to you. Hope these scumbags get charged with fine and jail time. Thanks for the alert - I’m going to delete my saved passwords now

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support 🙏🥰 unfortunately, I don’t think they are likely to be caught but hopefully I can prevent others falling victim.

  • @cfk21
    @cfk215 ай бұрын

    Sorry you had this bad experience and thanks for posting the details as a warning to others. Please keep up the great work that you do.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you, I will 🙏😊

  • @sodbuster4411
    @sodbuster44115 ай бұрын

    I'm so sorry you experienced this. I enjoy your content and wish you all the best moving forward.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much!

  • 5 ай бұрын

    Mynda ... thank you very much for your open and transparent sharing of this terrible experience. I can't say I would have near the depth of knowledge to have taken the immediate actions you and your husband took. There are only a very few subscription emails that I receive on a regular basis ... yours is one of them. Your content is fabulous and, along with your genuine approach to delivery, it sets you apart. I may be just one voice here, but I suspect many other of your viewers share my opinions. Hope you get back up and running and I look forward to your next blog/videos.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much for your kind words and support 🥰 I hope this video can help others avoid this experience. We are lucky it wasn’t worse.

  • @DigitalMetal
    @DigitalMetal4 ай бұрын

    They can't just grab a session token because you used open wifi. Most Websites use https, which is encrypted. Antivirus doesn't really work and shouldn't be suggested. As you already said, you had antivirus on your computers. So either this wasn't the problem or it just shows that the antivirus doesn't work.

  • @johndor7793

    @johndor7793

    4 ай бұрын

    I guess anti-viruses are next to useless unless its archaic viruses pretty much?

  • @ab1otic222
    @ab1otic2223 ай бұрын

    What a scary thing to happen! So glad you got it resolved and thank you for sharing so clearly what happened, how and the steps for recovery.

  • @ExcelCampus
    @ExcelCampus5 ай бұрын

    Thanks for the very educational video, Mynda! I'm sorry this happened to you. I'm sure it was stressful! It's great that you were able to get everything recovered in a relatively short period. Although I'm sure it felt like days. And btw, great video! I really like the editing.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Cheers, Jon! It wasn’t a fun time but I learned a lot and hopefully can avoid it happening again 😊

  • @nicein2000
    @nicein20005 ай бұрын

    Thank you for posting this! I work in IT and hacking incidents are definitely frightening! Your summary was excellent. And I agree that the most likely culprit in this case was public Wi-Fi and the hacker's use of pineapple or other Wi-Fi snooping tools to steal credentials and/or session cookies.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    It’s terrifying how easily they can get your details and the damage could have been a lot worse.

  • @Stitch-smart

    @Stitch-smart

    4 ай бұрын

    Is the belief here that the laptop itself was compromised by the hackers? i.e. Windows or Mac or Linux - i.e. the OS on the laptop? All the sites mentioned use TLS - even with a pineapple in the middle, the hackers still wouldn't be able to get the session cookie - or info from the browser.

  • @crystalclink

    @crystalclink

    4 ай бұрын

    I would add a recommendation to install Malwarebytes to any PC or Mac. Be sure to turn check for rootkits as it's not on by default. Turn off the browsers ability to store passwords and payments. Even tho she showed the Edge screen where "add" was empty, click the gear to double check. More often than not there will be saved information there which you want to delete. Turn off the same stuff in Chrome and Firefox.

  • @AlainDejalle

    @AlainDejalle

    4 ай бұрын

    I assumed that these website use HTTPS. How can the token be intercepted?

  • @lifeindivine

    @lifeindivine

    4 ай бұрын

    ​@@AlainDejalleYes Sir I also want to know. Please tell me also once you got to know it.

  • @juliomaranhao
    @juliomaranhao5 ай бұрын

    How can an open Wi-Fi be insecure? All web connections nowadays are HTTPS, so encrypted. Any traffic captured reveals no info to a hacker. But if a site has vulnerabilities and was previously compromised then the injected malware javascript can send the session id to the hackers. So it seams to be a server fault or a client fault. Supposing your PC was clean AND also all Google systems then I recommend a more secure web browser because it may have not been protecting your Google cookies (session ids) properly while navigating non-Google sites. I suggest Firefox because it has specific mechanisms for cookies safety and isolation active by default. I don't know about Chrome's status on this topic. Cheers. P.S.: Where are the experts to comment? I am very curious on a good analysis even speculative ones. I'm an advanced PC user but not security analyst. Also not english-native person. ;-)

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I always used wifi on the understanding that https was safe too. All I can tell you is I was hacked, and it happened after accessing wifi. I was using Edge, so 🤷‍♀️

  • @mrkenwu1
    @mrkenwu15 ай бұрын

    So sorry this happened to you, of all people. Thank you for sharing your experience. I hope the ordeal is behind you.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    It is, thankfully 🙏

  • @effionglesleyakpan1619
    @effionglesleyakpan16195 ай бұрын

    It must have been very discomforting. Really sorry to hear that, but I'm glad you were able to recover your account and put up this important lessons learned for us to learn too. I pray you well in all your endeavors.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much!

  • @_droid
    @_droid5 ай бұрын

    The WiFi theory doesn't make sense. Connections to Google and such are all SSL encrypted. Even on an unencrypted WiFi no one would be able to capture session tokens. Plus I don't think you can do a lot of that Google stuff without putting in the password at some point. Maybe you didn't notice a man-in-the-middle attack on unencrypted WiFi... maybe but I think you're missing something. What is this new laptop? Where did it come from? Did you wipe everything off it and install the OS fresh directly from your the OS vendor? Was the OS up to date? My bet is that laptop is the key. Antivirus software is essentially useless so I wouldn't regard those scans as telling you anything.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    It’s not the connection back and forth that’s the issue, it’s the cookie/session token stored in the browser temporarily that they were able to get over the network. That’s why when you login to public wifi networks you get a warning about it not being secure. The laptop was a new surface direct from Microsoft with the latest version of windows 11. I’m pretty confident the laptop wasn’t infected with malware.

  • @_droid

    @_droid

    5 ай бұрын

    @@MyOnlineTrainingHub "Over the network"... that would be encrypted with SSL including the cookies. Still missing something. They could have hacked into the laptop itself maybe. I am interested in knowing how this happened though. It's often a small detail people don't remember doing. So far I don't see an explanation.

  • @jirehla-ab1671

    @jirehla-ab1671

    5 ай бұрын

    ​​@@MyOnlineTrainingHubit would have been better if you have done a clean install before using the laptop.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    @_droid me too. There are some pretty sophisticated possibilities like this one: cybersecuritynews.com/mitm-attack-on-wi-fi-networks/ @jirehla-ab1671 maybe, but I think it's highly unlikely I received a brand new in the box laptop from Microsoft that contained malware.

  • @chocolate_squiggle

    @chocolate_squiggle

    5 ай бұрын

    @@MyOnlineTrainingHub You get the warning about it not being secure because SOME traffic from your laptop is sent in the clear e.g. regular old DNS queries, which might give away which websites you are visiting. But _droid is right, modern browsers try to force HTTPS (aka SSL/TLS or even now HSTS) meaning data transmitted between browser and server is encrypted. It shouldn't be possible now to simply sniff raw wifi frames, or to sniff higher layer IP packets to steal cookie/session data. What they're suggesting is also my thought, that they somehow compromised the laptop itself - still over the public wifi network somehow, but a more involved attack and not just sniffing/copying your data as you exchanged communications with those sites.

  • @tinoszczvrcic
    @tinoszczvrcic5 ай бұрын

    So sorry to hear about this. Hope you and Phil were able to reassure each other that first night. Can't imagine what it must have been like.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    It would have been 10 times worse without each other. Definitely terrifying. ☺️

  • @tomvanloo5989
    @tomvanloo59895 ай бұрын

    Although you say you're no security expert, this story sure sheds a light on some disturbing methods. Thanks for the explanation. I for one am glad you're back !

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support ☺️

  • @UxoriousBurrito
    @UxoriousBurrito4 ай бұрын

    Never. Ever. Use public wifi. Especially without using a VPN.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Cheers!

  • @DonchoGunchev

    @DonchoGunchev

    4 ай бұрын

    How does that stip the SSL layer used to access the web site?

  • @RossMaynardProcessExcellence
    @RossMaynardProcessExcellence5 ай бұрын

    Blimey this is terrifying! And you are obviously more savvy than many of us. We're doomed! Doomed!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    It certainly was scary, and we were lucky it wasn't worse. I feel a lot more educated and in control of my cyber security now, but you can never be too careful.

  • @RossMaynardProcessExcellence

    @RossMaynardProcessExcellence

    5 ай бұрын

    @@MyOnlineTrainingHub So, always use a VPN when travelling away from home? When you say log out of active accounts when shutting down, do you also include Google and Microsoft? I do log out of other websites, but those two sit behind the activity of the computer (Microsoft 365 and various Google activities)

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Yes, log out of everything. Imagine if they had access to your email account!!!

  • @elpislivenetwork
    @elpislivenetwork4 ай бұрын

    I am really sorry about what happened to you. Good thing you recovered your channel.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @0Milena_aneliM0
    @0Milena_aneliM04 ай бұрын

    Thank you for sharing. It's quite wonderful you managed to stay safe and recover the accounts, and chose to educate others as well :)

  • @pascalejacquelinepetit5131
    @pascalejacquelinepetit51315 ай бұрын

    Thank you for sharing your thought process and activities after this terrible ordeal, so that we remain vigilent! Mynda, we love your great videos with interesting content, perfect editing and unwavering professionalism, and this was no exception. Glad that things are getting back to normal.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much for your support!

  • @FarhanMerchant
    @FarhanMerchant5 ай бұрын

    Glad that you acted fast and had it all back ; appreciate sharing your lessons learnt. Wish you & family a safe time

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much!

  • @PostcardsFromJapan
    @PostcardsFromJapan4 ай бұрын

    Thank you for sharing this story and the good advice.

  • @aprashant1048
    @aprashant10485 ай бұрын

    I am sorry to hear this happened to you. Thank you for sharing this video. Hope you recover your account.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support. We've recovered the account 😅

  • @chrism9037
    @chrism90375 ай бұрын

    That is terrible Mynda. What the heck is wrong with people? Luckily everything is now ok and thanks for posting all of the security measures to take!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support 😊 hope it never happens to you.

  • @Tenquilts
    @Tenquilts5 ай бұрын

    Thanks for posting this info (and in such a clear, outlined way as your Excel videos!). I'm sorry this happened but happy that you were able to restore and prevent wherever possible. It makes me think of all the people who make their living from internet commerce who would NOT be able to detect this or know what to do.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support! Much appreciated 😊 it sure was scary 😔

  • @silversolver7809
    @silversolver78095 ай бұрын

    So glad you got it all back, you would be a big loss to the community, never mind the major personal loss it would be for you. Thanks for the excellent-as-usual video about it, got to forward this to a few people!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much for your support!

  • @ExcelHechoFacil
    @ExcelHechoFacil5 ай бұрын

    Que bien que ya estes de regreso, prácticamente hicieron un desastre los piratas que accedieron a tus cuentas... Lo siento mucho Mynda, me alegra que ya estes de regreso.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Gracias 😊

  • @RabiGurungXybernetics
    @RabiGurungXybernetics5 ай бұрын

    I am so sorry to hear that. I hope it never happens to anyone. That's an awful thing to happen to someone.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I hope this video can save others from having this experience.

  • @angelabrown769
    @angelabrown7695 ай бұрын

    What a terrible ordeal for you. Thanks for posting such a succinct and useful video

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad it was helpful!

  • @MegaTrickykid
    @MegaTrickykid5 ай бұрын

    it is sad that the best people always have to go through the worst experiences. thank you very much for sharing this very unpleasant situation. All the best to you.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your kind words 🥰

  • @happymystic9800
    @happymystic98005 ай бұрын

    Sorry to hear that you had to make this experience and I am happy that your are on the way to recover from it. A big thank you to make this public in such a detailed fashion. A lot of your recommendations has rung a bell with me and they are a great to reminder to check the own precautions. However, one thing I would never ever do is to connect to public WiFis regardless how trustworthy the environment appears to be. I hope you get back on track really soon. All the best. Cheers …

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you so much! We’re thankfully back on track now 🙏😊

  • @TheElkster
    @TheElkster4 ай бұрын

    How truly awful....The stress it must have put you through, and at that time of night! So glad you managed to get everything under control eventually.... I really feel sorry for those less tech savvy out there 😢 Thanks for this and all the other amazing videos you provide ❤

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @MegaDeano1963
    @MegaDeano19634 ай бұрын

    Crazy world , great that you discovered the security breach 8 mins into it . Also good you kept you wits and ploughed through to a solution .

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @rkdaltry2022
    @rkdaltry20225 ай бұрын

    Really sad to hear this...wish you the best to recover your site

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you 🙏 we are fully recovered, but it was very scary.

  • @yarnmotivated-joyceswensso9744
    @yarnmotivated-joyceswensso97445 ай бұрын

    Wow, sorry you had to experience that. Thank you for sharing and making us aware of how we can better secure ourselves against the hackers.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support. Hope this helps you avoid experiencing the same ☺️

  • @lorenzoladejobi8701
    @lorenzoladejobi87015 ай бұрын

    Thank you for the updates and education!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad I’m still here to help ☺️

  • @python-excel
    @python-excel4 ай бұрын

    So sorry this happened to you! What an awful experience :( Thanks for sharing

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @raulmorales1656
    @raulmorales16565 ай бұрын

    I'm so sorry for what happened. Thank you🙏 so much for sharing these tips.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    You are most welcome 😊

  • @sseemm
    @sseemm5 ай бұрын

    Thank you Mynda for this beautiful and informative video. And I'm so sorry that you had such a bad experience. I was very angry when that happened to you. I kept refreshing my KZread hoping there was a mistake. Thank god everything is back to normal, because we can't lose someone great like you ❤❤

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks for your support. Unfortunately, we lost a lot of followers when the hackers started their livestream, so I appreciate you had faith in us to stick around 🙏☺️

  • @erictaylor394
    @erictaylor3945 ай бұрын

    Many thanks for sharing your experience and how you handled it. It helps us all be vigilant. Your channel is such an amazing resource, so sorry you had to deal with this.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    So nice of you 🙏

  • @MrNigelGWillis
    @MrNigelGWillis4 ай бұрын

    Thanks, Mynda. Your services really are incredible. Good luck

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your support!

  • @kenmcmillan2637
    @kenmcmillan26375 ай бұрын

    Damn, I'm so very sorry!! What a harrowing experience!! I can't imagine the stress that created when you were awakened by the texts on your phone. So glad you didn't lose your channel. Those damn hackers are getting so sophisticated!! Very, very scary!!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you! It sure was scary. To the point where you feel numb. Hope this story can help others avoid it.

  • @ShootingStar_JB
    @ShootingStar_JB5 ай бұрын

    Thank you so much for the step by step of how this happened. Thank you for the great tips at the end, I'm in Cybersecurity, but for anyone out there who isn't, this is do helpful. I'm so sorry you are going through this! Very helpful to have shared!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad something good can come of this experience.

  • @JimFikes
    @JimFikes5 ай бұрын

    Good luck to you. It is a dangerous world out there. Hope you are back up soon.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Sure is! Thankfully, we’re back up and running 😊

  • @johngamiles2541
    @johngamiles25414 ай бұрын

    I share your frustration! My computer was hacked about the same time yours was. I immediately shut everything down and then started figuring out how they gained access. Research led to discovering my ISP had been hacked, but only learned about the breach when it made the news. They didn't even offer any type of help to prevent the possibility of hackers gaining access in the future. Like you, I have changed how I use the internet now, down to turning off my network card when I am away from the computer for any length of time.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Sorry to hear of your experience. It certainly changes the trust level you have in general.

  • @johngamiles2541

    @johngamiles2541

    4 ай бұрын

    The really hard part, as you have experienced, is how they decide to hit your system of all the computers in use. I will never know how they got it in, but I have made it extremely hard for someone to ever do it again. From that perspective, we learn to be more diligent and take nothing for granted.

  • @oswevega2939
    @oswevega29395 ай бұрын

    you excel as well in explaining this !! thanks !!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much 😊

  • @loneranger5928
    @loneranger59285 ай бұрын

    Mynda, I'm glad in the end all worked out with you.. Thanks for the information 👍

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you 😊

  • @danielzambori4364
    @danielzambori43645 ай бұрын

    All my thoughts are with you! Thank you for the great content you share with us!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I appreciate that! 🙏☺️

  • @CoolJosh3k
    @CoolJosh3k4 ай бұрын

    Yep, Google/KZread is absolutely terrible when it comes to security for users or even how victims can recover.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    I'll agree to that.

  • @methodical-monkey
    @methodical-monkey4 ай бұрын

    Thank you for a lovely detailed video. I appreciate your honesty and your sincerity and very thorough explanation. That is very helpful.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    You are so welcome!

  • @TSSC
    @TSSC5 ай бұрын

    Great to have you back.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thanks so much 😊

  • @crispexcel
    @crispexcel5 ай бұрын

    Sorry for the hack and thanks for educating us on how to stay safe

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I'm glad something good is coming of it 😊

  • @0xkero
    @0xkero5 ай бұрын

    Super valuable testimony. Thanks a lot

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    You are welcome 🙏

  • @benoitcloutier8803
    @benoitcloutier88035 ай бұрын

    Very interesting, glad you got your accounts back

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Thank you!

  • @oppenheimjm
    @oppenheimjm4 ай бұрын

    Thanks for explaining how the hack was done. Scary as to how easily (and cheaply) you can setup a hacking hotspot.

  • @tubejim101
    @tubejim1015 ай бұрын

    One more level to protect for your credit card, is to use a virtual credit card. Only unlock it, when making purchases. Also, use a different number with each vendor, so you know who tried to use it.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    I've never heard of a virtual credit card, but I'll look into it 🙏

  • @hreynisson
    @hreynisson4 ай бұрын

    I just happened to see this video while doing research on internet security. The way you tackled this is both admirable and professional. I use Excel a lot and this video, and your way of turning things into a positive, earned you a like, sub and notifications on the channel :)

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    4 ай бұрын

    Thanks for your kind words and support!

  • @Alobger
    @Alobger5 ай бұрын

    Scary! Glad your videos have been recovered.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Us too! 🙏

  • @danbromberg
    @danbromberg5 ай бұрын

    Well described and based on your unfortunate experience, this reminder prompted me to take heed!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad I could help you avoid the same fate!

  • @donaldreitsma6419
    @donaldreitsma64195 ай бұрын

    Thank you for sharing your experience. I will be starting to travel internationally again and have certainly learned from your experience!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Best of luck!

  • @patrickkinbonso1809
    @patrickkinbonso18094 ай бұрын

    Bless, can't trust any public WiFi nowadays and cyber security awareness needs to be raised further

  • @dagthewog6290
    @dagthewog62905 ай бұрын

    Thank you for sharing this.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    My pleasure!

  • @mesharkchukwu3888
    @mesharkchukwu38885 ай бұрын

    Thank you for sharing your story for us to keep our guard. Was the new laptop their gateway?

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Yes, definitely the laptop because it happened when we got home and all devices were off at the time and we didn’t have any viruses, so it must have been a token theft on the laptop over wifi.

  • @grantashby8420
    @grantashby84205 ай бұрын

    Thank you for the tipoff and for the tips. Even after a career in ICT Security as I have had, I can always learn from the experience of others. Being retired, I haven't been able to justify participating in your very attractive training courses, but I have added much to my range of Excel skills that your regular Excel newsletters offer free of charge. I am further encouraged by discovering that you are based here in Australia (even if it's Queensland rather than here in South Australia 😝).

  • @grantashby8420

    @grantashby8420

    5 ай бұрын

    It does raise the question (that I'm sure has been raised before) of whether Google is too slack in its authentication requirements for allowing privileged actions. 😡

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    😁 thanks for your support, Grant! It absolutely is too slack in its security around making changes to its account security. One of the reasons they couldn’t do much with LinkedIn is because they couldn’t add any additional emails/2FA credentials to the account without logging in first!

  • @kathyfryman9380
    @kathyfryman93805 ай бұрын

    Thank you for telling us about this! I'm changing passwords and adding extra verification now!

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad to hear that 😊

  • @gideonravid2722
    @gideonravid27224 ай бұрын

    Thanks for sharing. It is a brave move that will help us all

  • @pkuchnicki
    @pkuchnicki5 ай бұрын

    Wow, how enlightening. Thanks for sharing your unpleasant experience.

  • @MyOnlineTrainingHub

    @MyOnlineTrainingHub

    5 ай бұрын

    Glad it was helpful! ☺️

Келесі