Did i get hacked?

[Exhjil]

so i just got this email in november 11 on my first email>
Your one time access code is OFljKbAu
Thank you for meeting with Destiney Figgs to help complete their Form I-9.

Your job is to review Destiney's work authorization documentation. This documentation proves Destiney is eligible to work in the United States.

Before you continue, please make sure you meet these requirements:

• Have access to a camera-enabled device
• NOT the new hire (Destiney Figgs)

Once you review the documents, you will be asked to electronically sign the form. Your signature and contact details will be stored as part of the Form I-9 record.

and i have no idea what is this at all. Its from my email where i keep my game accounts and some personal stuff, but nothing that i need to check often. So i barelly open my emails every week or so, and now that i did i found this, it got this from an email named>

I-9Management@equifax.com​

i googled up I-9Management and found some stuff, but i still have no idea about what is this, but seems like it has to do something with the us? im from eu tho.

This all started that i suddenly at november 17 got a message that i got banned from rainbow six siege on my steam account and it was a suprise cuz i havent played with the game for like 2 years now or so. Then i typed the support about whats up, and then they told me that the ubisoft account i logged in dont own r6. I asked them what are they talking about, i give them some stuff and its turned out, that my ubisoft account email got changed, to a random Proton mail, back in march ig bc since this year march i dont receive ubisoft emails at all. ( this is on my 2 email )

I have 3 separate email, 1, one for games,online life, 2, one for everything to use in random sites etc, nothing personal expect my ub account. But still not using it any sus site. And 3, one for personal stuff, irl stuff to handle, job, university etc.
my 3rd email seems to be fine but im scared tbh, i already got hacked once and i had to fight for get back my accounts, i made the 1 new email for the game accounts then. and my 3rd got hacked aswell, but i just changed my password there security email, phonenumber etc. When this happend they even got acces to my 2fa sms/on my phone that was freaked me out tho. I hard reseted all of my devices, and changed every password, made a new email for the online accounts, and thats it. And guess when this happend? around februar.

The problem is that i stopped receiving the emails from ubisoft at the end of march, and when this happend i already changed the password, resetted everything etc. And made the new email, since then i was be carefull to not use all of this emails on the same pc/phone ( im still afraid ) but its seems like i got hacked again? and if so then how? bc i dont download anything to my pc, literally nothing nor to my phone,and i have a separate email to register in to these random sites, ( by this i mean stuff like, mediafire,mega,devianart,random artsites,exitlag,etc ) so not even unnamed sites that offer free money or some stpid sht. If i get hacked again then how? And what do i have to do, to finally stop all of this? Do i have to completly delete all of my emails and make fresh new ones? change them everywhere? that would fix this? should i reset my pc again?(formatting,reinstalling) should i reset my phone again, do all of this worth anything at all? And do i have to be afraid for the email i just show you above? that i-9management stuff? My ubisoft account have my credit card connected, with my phonenumber, name etc all of my personal data. My steam account got a ban message thanks to this, and im honestly super scared at this point about whats happening and how can i stop this.
Please give me some advice, and tell me what to do, im legit panicking


Sorry for my English, its not my mother language, and im still learning it.

 

[ShiBDiB]

Well the Destiny email is obviously a scam and just delete it.

The ubisoft email also sounds like it might have been a scam and they got you to give them your account info.

As far as hacked? No, it sounds like you got social engineered into giving up info. I highly doubt your computer is in anyway compromised but your accounts might be.

Fixes

- Reset your passwords for your emails and important accounts via the official websites. (Emails First)
- Get a real email that filters these obvious scams (I don't even see these types of emails anymore on gmail)
- Stop responding to emails from random companies.
- Enable 2FA on accounts that matter.

 

[MarsM4N]

When I read "I got hacked!" nowadays, I always have to giggle. Operating systems got pretty idiot proof, it's not like back in the days when you visited the wrong site you got digital gonorrhoea that steals all your data. 99,9% of the time people hand out their login credentials themself by Social Engineering, the rest comes down to compromised websites (and you used the same password for everything).

Even "high value targets" don't get easily hacked, like the following example demonstrates:

Follow the steps @ShiBDiB recommended. I also would add the following to the list:

• do not respond to eMails (contact Steam, Ubisoft, EA, etc. only via the help section in their clients or the contact info you can find on their websites)
• never give out personal data per eMail (they have already all they need)
• use a password manager (I recommend Bitwarden, it's FREE & very secure)
• auto generate long 16+ digit unique passwords for each service/website (never reuse the same password; you can use auto fill with the PW manager, you don't have to remember them)
• use a 2FA app, I recommend Authy (they work with all services, have 2FA backups & also have a desktop app in case you loose your phone; also check out their guides)
• backup your 2FA (bar)codes to at least 2 devices (if you loose them you're fk'd & nobody can help you)
• bookmark websites, so it's more obvious when you're on a "faked" website (also auto fill will not work on a wrong "faked" website, another security bonus)
• use a eMail provider where you can create secondary eMail addresses (f.e. one for banking/gaming accounts/private contacts, one for shopping, one for the other not valuable stuff)
• check on haveibeenpwned.com if your eMail was compromised (a negative only means your data wasn't traded in public; if you get often shady eMails it's pretty certain you've been pwned & it's time to change your eMail)

 

[lexluthermiester]

so i just got this email in november 11 on my first email>
Your one time access code is OFljKbAu
Thank you for meeting with Destiney Figgs to help complete their Form I-9.

Your job is to review Destiney's work authorization documentation. This documentation proves Destiney is eligible to work in the United States.

Before you continue, please make sure you meet these requirements:

• Have access to a camera-enabled device
• NOT the new hire (Destiney Figgs)

Once you review the documents, you will be asked to electronically sign the form. Your signature and contact details will be stored as part of the Form I-9 record.

and i have no idea what is this at all. Its from my email where i keep my game accounts and some personal stuff, but nothing that i need to check often. So i barelly open my emails every week or so, and now that i did i found this, it got this from an email named>

I-9Management@equifax.com​

i googled up I-9Management and found some stuff, but i still have no idea about what is this, but seems like it has to do something with the us? im from eu tho.

This all started that i suddenly at november 17 got a message that i got banned from rainbow six siege on my steam account and it was a suprise cuz i havent played with the game for like 2 years now or so. Then i typed the support about whats up, and then they told me that the ubisoft account i logged in dont own r6. I asked them what are they talking about, i give them some stuff and its turned out, that my ubisoft account email got changed, to a random Proton mail, back in march ig bc since this year march i dont receive ubisoft emails at all. ( this is on my 2 email )

I have 3 separate email, 1, one for games,online life, 2, one for everything to use in random sites etc, nothing personal expect my ub account. But still not using it any sus site. And 3, one for personal stuff, irl stuff to handle, job, university etc.
my 3rd email seems to be fine but im scared tbh, i already got hacked once and i had to fight for get back my accounts, i made the 1 new email for the game accounts then. and my 3rd got hacked aswell, but i just changed my password there security email, phonenumber etc. When this happend they even got acces to my 2fa sms/on my phone that was freaked me out tho. I hard reseted all of my devices, and changed every password, made a new email for the online accounts, and thats it. And guess when this happend? around februar.

The problem is that i stopped receiving the emails from ubisoft at the end of march, and when this happend i already changed the password, resetted everything etc. And made the new email, since then i was be carefull to not use all of this emails on the same pc/phone ( im still afraid ) but its seems like i got hacked again? and if so then how? bc i dont download anything to my pc, literally nothing nor to my phone,and i have a separate email to register in to these random sites, ( by this i mean stuff like, mediafire,mega,devianart,random artsites,exitlag,etc ) so not even unnamed sites that offer free money or some stpid sht. If i get hacked again then how? And what do i have to do, to finally stop all of this? Do i have to completly delete all of my emails and make fresh new ones? change them everywhere? that would fix this? should i reset my pc again?(formatting,reinstalling) should i reset my phone again, do all of this worth anything at all? And do i have to be afraid for the email i just show you above? that i-9management stuff? My ubisoft account have my credit card connected, with my phonenumber, name etc all of my personal data. My steam account got a ban message thanks to this, and im honestly super scared at this point about whats happening and how can i stop this.
Please give me some advice, and tell me what to do, im legit panicking


Sorry for my English, its not my mother language, and im still learning it.

Delete that email and block the sender. It's a phishing attempt.

 

[delshay]

Why do some users fall for this. If I get email with title showing some great deal I never open the email, but I will go direct to the website.

For Example: I get emails from EPIC, Steam ect, ect, but I never click on the link, I go direct to the website or open they apps & check for myself if the deal is present.

 

[Exhjil]

Well thanks for the respondes. I didnt get the email from ubisoft or steam, i got the message in the steam app. Like the acctual steam app about that fact that i got banned. I connected the ubisoft support then it turned out that my email and all of my data got changed, and i didnt even get noticed about it, thats why i shitted of my self The phishing email just simply scared me, i have never heard about it, and it gave me a one time password to use, i was confused ngl. I will do the recommended steps, thanks for the help.

 

[Bill_Bright]

This is what scares me:

Then i typed the support about whats up

What does this mean? Did you click a link or send an email to Tech Support listed in that suspicious email? Or was that support contact a number or address you already had from the past?

If you clicked any link in that suspicious email, you "might" have compromised your system.

Regardless your action, you need to make sure your computer (operating system) and security are fully updated. Then do a thorough scan with your current security program. I also recommend periodic scanning with a secondary scanner - I use Malwarebytes Free for that. Hopefully, nothing bad will be detected.

Then from now on, make sure you are not "click-happy" on unsolicited links, downloads, attachments or popups, as well as keeping your OS and security current.

Note this is the the exact same "Practicing Safe Computing" discipline everyone should follow at all times.

When I read "I got hacked!" nowadays, I always have to giggle.

Why do some users fall for this.

Maybe it is time to remind everyone that all of us were naïve, newbies once. Some of us may have been fortunate to have mentoring people close by in the form of older siblings, or more experienced co-workers, or tech-savvy parents. Some of us were on our own from day one.

So no doubts, there probably were others giggling at us, and wondering how we could be so gullible to fall for something too.

Let's also not forget that the bad guys (some of them anyway) have gotten much smarter, more experienced and much more sophisticated too - especially in their social engineering tactics.

I recently got an email [supposedly] from Chase Manhattan Bank that was extremely convincing and genuine looking. It was scary because instead of addressed to "Dear Customer" or "Dear Member" (typical red flags - since any legitimate business partner better know my real name) this email was actually addressed to me by my name.

I could not find a single grammatical or spelling error either - typically another red flag.

If I didn't already know that "Chase Manhattan Bank" changed it name to "JPMorgan Chase Bank" a few years ago, and now just goes by "Chase Bank", I might have been drawn in. Well, the fact I have no account and never did with that bank was a clue too!

 

[Exhjil]

This is what scares me:

What does this mean? Did you click a link or send an email to Tech Support listed in that suspicious email? Or was that support contact a number or address you already had from the past?

I mean by this, that after i got the message in steam that i got banned in rainbow six siege, i typed to the official ubisoft support via they contact support button from their side, and its turned out that i am logged in with a new ubisoft account that not existed before march (its turned out bc they replied back that the account i contacting from is not own rainbow six siege, but it was connected to my steam profil and such) i was mad at first by what they mean with this, and then it turned out that the account i was logged in is an empty account that got created in march. (februar was the time when my mail got hacked, and i lost all of my accounts, they even readed my sms 2fa-s in some way, and i didnt even get noticed on my phone about them. After i made fresh install of everything, pc/phone/new mails, i begin change all of my data, and old accounts. during this time i changed my ubisoft account email to a new one aswell lets name it email2. And i was done with this. But now its turned out that the ubisoft account i was logged in, with email2, was an empty account while my account got changed to a new one at march, after i already changed my email back then. I still have no idea what happend here ) . And after several mails its turned out that my ubisoft account email password, username, even birthday on it got changed to some other stuff, that just simply not belong to me. This scared me i went to check my mails, and then i found this phsising stuff, that scared me even more with the one time use password and im here now.

 

[Bill_Bright]

I mean by this, that after i got the message in steam that i got banned in rainbow six siege, i typed to the official ubisoft support via they contact support button from their side

I am sorry but I still don't understand - in this case, I don't know what "support button from their side" means. Maybe someone else can follow.

Regardless, it does not really change my advice. Make sure your computer is up to date, then scan with 2 security products, then don't be click happy on unsolicited links.

 

[Exhjil]

https://www.ubisoft.com/en-us/help/contact this, is the official ubisoft support site, like its their website the real one. And there is button on their site to achive this page, that says support or contact.

I am sorry but I still don't understand - in this case, I don't know what "support button from their side" means. Maybe someone else can follow.

Regardless, it does not really change my advice. Make sure your computer is up to date, then scan with 2 security products, then don't be click happy on unsolicited links.

and i will take your and the others advice as well. Thanks for the help.

 

[r9]

Why do some users fall for this. If I get email with title showing some great deal I never open the email, but I will go direct to the website.

For Example: I get emails from EPIC, Steam ect, ect, but I never click on the link, I go direct to the website or open they apps & check for myself if the deal is present.

It always works better to try a single default password on million machines instead of million password combinations on a single machine.
At least that's how NASA got hacked back in the day, targeting Win Xp machines with blank Admin password.

 

[Bill_Bright]

https://www.ubisoft.com/en-us/help/contact this, is the official ubisoft support site, like its their website the real one. And there is button on their site to achive this page, that says support or contact.

Thanks for that. I feel better now that you didn't link to a malicious site.