It’s a nightmare scenario – you try to log into your Facebook account (could be any other social media account), and it’s not working. You go through the password reset process, only to realise the email associated with your account has also been changed. Your Facebook has been hacked. What now? Let’s break down what typically happens in these situations, why it happens, and what you can do.
What Usually Happens
When hackers gain control of a Facebook account, they often move quickly to change the email and password. This locks you out and gives them time to exploit the account for their own purposes. They may:
- Send spam or phishing messages to your friends list.
- Post inappropriate content to damage your reputation.
- Try to scam your friends for money or personal information.
- Use your account for identity theft.
- Gain access to other people you know through your trusted account. Hackers can exploit your relationships to spread their malicious activities further or gather more personal information.
Why Do Hackers Do This?
Hackers have a few primary motivations:
- Financial Gain: They can use your account to spread scams or sell access to your account to other malicious actors.
- Chaos and Disruption: Some hackers simply enjoy causing trouble and disrupting people’s lives.
- Data Harvesting: Your personal information on Facebook can be valuable for identity theft or targeted advertising.
How Do Hackers Get Access?
There are a few common ways hackers compromise Facebook accounts:
- Weak Passwords: Using easily guessable passwords or reusing passwords across multiple accounts.
- Phishing Scams: Clicking on malicious links or downloading infected attachments that trick you into giving up your login credentials.
- Keyloggers and Malware: Malicious software installed on your device that captures your keystrokes or monitors your online activity.
What Could You Have Done to Prevent This?
Here are some essential security measures:
- Strong and Unique Passwords: Create complex passwords for each of your accounts using a password manager (e.g. BitWarden)
- Two-Factor Authentication (2FA): Enable 2FA to add an extra layer of security, requiring a code from your phone or another device to log in.
- Be Wary of Suspicious Links and Attachments: Avoid clicking on links or downloading attachments from unknown sources.
- Malware Protection: Using secure malware protection (AntiVirus) for your devices
- Keep Your Software Updated: Regularly update your operating system to protect against the latest threats.
What Can You Do Now?
- Facebook’s Account Recovery Process: Facebook provides a process for recovering hacked accounts. You’ll likely need to provide proof of identity and ownership of the account.
- Report the Hack to Facebook: Report the compromise to Facebook as soon as possible.
- Inform your connections: Protect your connections by alerting them that your account has been compromised and can no longer be trusted.
- Secure Your Other Accounts: If you reused the same password on other accounts, change them immediately. Enable 2FA on all important accounts including Banks, Social Media, Email, Online Stores, Work Accounts.
- Improve your Cyber Security: Learn how to be Cyber Safe as an individual:
- https://www.cyber.gov.au/protect-yourself/resources-protect-yourself/personal-security-guides
- Monitor Your Financial Accounts: Keep an eye on your bank and credit card statements for any suspicious activity.
- Report your Cyber Attack: https://www.cyber.gov.au/report-and-recover/have-you-been-hacked
- Mental Strength: Remember that this has happened to many thousands of people and you will survive but it will take time.
Important Note: We Don’t Provide Services for Recovering Individual Accounts
Please understand that we specialise in cybersecurity services for businesses. We don’t have the ability to directly access or recover individual Facebook accounts, as this is controlled by Facebook themselves. Furthermore, attempting to hack into an account is illegal and not a service we provide.
We recommend following Facebook’s official recovery process and providing them with the necessary information.
Remember, the best defence against hacking is proactive security measures. Be vigilant and protect your personal information online!
Additional Resources
If you are experiencing mental health challenges or trauma related a cyber incident, data breach of identity theft, the following resources are available:
- ID Care can be contacted on 1800 595 160 and provide practical and behavioural support to individuals concerned about cyber security and identity theft. This service is free of charge.
- Lifeline provide crisis support and suicide prevention services 24/7 and can be contacted on 13 11 14.
- Beyond Blue provide 24/7 access to mental health counsellors via chat and call on 1300 22 4636.
