What Happened to My Facebook Account 🤔❓

Real-Time Experience of Being Hacked of My Facebook & Instagram Account

Hello Guys 🙋, Today’s episode is based on my true story that happened six days ago.

What Happened?

On the 29th of June, 2022, I was studying for my final exam in my undergraduate life. After covering some topics in the HRM module, I felt bored and try to open my Facebook account. The Facebook mobile application opened up my login page when I tried to open the application. It was a bit surprising to me as I already had a login session on my device. But I didn’t think much about that as it could have expired. I tried signing in to the account using my credentials. It prompted me with the wrong password warning. But it was quite familiar to me. As I frequently forgot/confused with multiple passwords for multiple accounts. I thought that I have given the wrong password. Then I tried with my all passwords. I wasn’t able to log in. These steps forced me to go with forgot password option as I have given a recovery email and mobile number with my account. So I didn’t have any sort of hesitation to click forgot password option 😕. But the email and phone number suffixed showed did shake me….. I have never seen those email and phone numbers 👺.

I slowly understood what could had happen. Yes, my account was hacked. But how is that even possible to change the recovery email or phone number 🌛? Anyway, that had happened. But I didn't receive an SMS or Email for the verification code. For Some moment I thought about what the hackers can do with my account as nothing was there. But there was a small fear as well.

I was trying to change the password as mentioned I loose control over the given recovery methods but Facebook didn't give me the change password option as well. But they asked for my national identity card but they mentioned that it may take up to 48 hours. So didn't have any clue what to do immediately….

But fortunately, after all of this, I had seen that I received an email message on my phone saying about the new unknown device login on the same day. But I saw it once after hacking. I clicked I am not that and secure my account option. then I was able to change my password immediately. I changed all email and mobile numbers immediately after accessing my account.

In the above image as you can see. The first number is my number and the second number was the number of some unknown number. The hacker changed my number to 97691398523 this number as the verification number. Hacker has changed my email as well. Check the below image (forgive me for the image quality as it was taken in a hurry). You may see there was some unknown email id was given as the current email address (geogeannrescle@gmx.com). I am still wondering how it could happen in an organization like Facebook with these high-security of authentication servers in Facebook.

What Next?

After successfully changing my email, phone number and password. I was ok. Feel relaxed. I knew it was a hacking action but I thought that I was quick enough to minimize damage. But didn't think about Facebook as an identity server at that time. After around 2 or 3 hrs, one of my close friends called me and told me that did you won 3 BTC 😃? I was like what???????. Because I didn't participate use any crypto-related activity. So what again ?????. He told me to check my Instagram post. I opened my Instagram and saw the below post in my profile.

I was quickly able to match what could have happened. With the new updates on Instagram and Facebook, We can switch apps from one to another if we configured and connected both. I have connected both apps. So hacker also had my Instagram access. When I revoke my Facebook access, The hacker posted this post on my Instagram account. I deleted the post and changed the Instagram password too. But then I quickly thought that Whatsapp also has some connection Facebook Identity server. So I further tighten my end by providing two-step verification to my WhatsApp account as well. I think I got to know is my Facebook wasn’t hacked intentionally but it was done to do some crypto marketing. The above Instagram post verifies that. If the hacking was done with some intentions, I could have possibly faced more issues than just these posts. But it can happen to you. So everyone must be clear and careful in whatever possible ways when it comes related to computer-related things as it has ears, eyes and even brains sometimes.

Further Precautions

But still, I am unable to believe how this happened. But anyway it is my responsibility to further the security of my accounts. Not only I but also everyone should maximize the safety of the accounts. Let's see how I maximize my Facebook account protection.

I have already enabled email and phone numbers to Facebook for verification purposes. But anyway it got broken by hackers.
Multifactor authentication is implemented in Facebook Identity Server. Everyone must use it for better security.
I enabled two-step authentication in my Facebook account too. So it will ask for an OTP code every time when we try to log in to Facebook. I set the Google authentication application for that purpose.
I also enabled SMS notifications for every sign-in attempt on my account. It will help to identify when anyone tries to sign in to my account.
But still, I have no idea how much these things will save/protect my account but I have maximized the protection.
We have to protect our data in whatever possible ways these days.

These are just available today. But in future, there may be more advanced protections. We must get used to them to save and protect our own precious data.

I believe you read and understand my story about my Facebook and Instagram hacking attempt and how I was able to solve it. If you have any concerns or any clarifications, don’t hesitate to contact me through the response section. Thank you for spending your precious time reading this blog and I am believing this will inspire you to continue reading my other blogs.