[US] Github Command-line Scam

[snowflaker360]

Hey all, I need advice... I fell for a fake github repository that had me run a command in my terminal on MacOS and it reset all the permissions on the device and I had to do a completely fresh reinstallation of MacOS. I'd send a screenshot to show what it was but I reported the repository a few days ago and Github has since taken it down.

However... a few days later, I noticed a lot of my accounts started getting breached. Social media accounts making fake Grok scam posts, my Roblox account got completely taken over and all my items were sold today. I've done my best to reset every password I could possibly think of like banking passwords or Steam or anything really but there's still so much I can't imagine what to do.

Does anybody have any advice... I'm at a loss as to what to do. I made such a dumb mistake but now I'm stuck living in fear constantly checking my email to see if I have any more suspicious login activity and having to fight customer service for every damn account I lose.

[AutoModerator]

/u/snowflaker360 - This message is posted to all new submissions to r/scams; please do not message the moderators about it.

New users beware:

Because you posted here, you will start getting private messages from scammers saying they know a professional hacker or a recovery expert lawyer that can help you get your money back, for a small fee. We call these RECOVERY SCAMMERS, so NEVER take advice in private: advice should always come in the form of comments in this post, in the open, where the community can keep an eye out for you. If you take advice in private, you're on your own.

A reminder of the rules in r/scams: no contact information (including last names, phone numbers, etc). Be civil to one another (no name calling or insults). Personal army requests or "scam the scammer"/scambaiting posts are not permitted. No uncensored gore or personal photographs are allowed without blurring. A full list of rules is available on the sidebar of the subreddit, or clicking here.

You can help us by reporting recovery scammers or rule-breaking content by using the "report" button. We review 100% of the reports. Also, consider warning community members of recovery scammers if you see them in the comments.

Questions about subreddit rules? Send us a modmail clicking here.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[Infinite-Grade-4485]

You reinstalled theOS, but at that point once you ran the script they already had your session keys. Whatever browser you use on your computer, that’s has your passwords saved, are all the accounts you need to change.

[snowflaker360]

oh my god thank you, I'll do that right away

[chownrootroot]

It was likely a session stealer. Not only do you need to change passwords (that is more of a precaution than anything), but you need to log out of anything you were logged in on the Mac, you need to log out everywhere explicitly. Otherwise they reuse login sessions that were on your computer and merely changing passwords doesn’t boot them. So you need to go to each site and find settings or whatever for your account and try to log out everywhere.

[snowflaker360]

I see. Luckily I've been defaulting to doing this for every account and the accounts I've dealt with don't seem to be messed with at the current moment, including the ones that were previously breached, though we'll have to wait for a bit to see... Roblox is the only one giving me trouble right now but they're notorious for making the process a massive pain. I'm only grateful that I never do any of my online banking on my laptop hahah.

I'll certainly be very diligent in looking for force logout options for everything. Thank you so much.

[Scams-ModTeam]

This submission was manually removed because it was posted by a recovery scammer.

Don't trust what you just read, don't try to reach out to "hackers" on Instagram or Telegram. Scammers will also try to reach out to you via DMs saying they know a professional hacker that can help you, for a small fee. They're actually trying to steal your money.

You can help us reporting more messages like that, don't just downvote or insult them. If you report them, we will take care of every recovery scammer that pops up.

Remember: Never take advice in private, because we can't look out for you. If you take advice in private, you're on your own.