How can I prevent getting hacked?

[imverysooproo (TIMMY)]

Hello everyone. I’m new to this devforum, but I need your help. It’s a bit of a long story, but I’m really worried about my account.

On October 17th, my account was hacked/compromised for the first time. From the start, I was confused as to why I was hacked. Well, not my Roblox account, but my Stream, Google account, Facebook, and Instagram accounts. My oomf and friends started donating around 37k+ Robux to me, which has already helped me a lot as I struggled to get my Robux because it’s not very easy and it’s very expensive for our country (our currency is different from others).

You can see the screenshot on here

After that, a few days later, my account was hacked again. I was tired and out of ideas, so I contacted Roblox support for the first time, asking for a rollback. Somehow, they gave me a rollback, so I was satisfied. BUT AGAIN, after a month… I was hacked for the third time. But this time, it’s a different amount of Robux. Maybe on October 26, I lost only 18,000 Robux, but on November 28 or 29, I already lost 34k+ Robux, which turned into 220 Robux because the hacker spent my Robux on Adopt Me, which I don’t play anymore. What’s worse is they put a Nazi Gamepass without my knowledge and tried to get me terminated/banned, but luckily it’s just one day.

I became stressed and almost gave up, because I had reset my password, reset cookies, cleaned any malicious files on my PC and my mobile, removed javascript, logged out some devices that were not mine, etc. Nothing changed. The hackers always come back and target me like 34k robux is not that rich, they’re so greedy as hell and thinking my account is special or unique

Can anyone give me a suggestion and how do I prevent this? I would be appreciate it and try to make my account more secure and safe to stay away from these brain-dead hackers. I’m also asking roblox support for second rollback because my friend got 2 rollbacks and some normal people got it, ik it’s one-time courtesy but there’s probably a chance or lucky you could get two rollbacks depends on what your situation is.

[Crazedbrick1]

Do research on common hacking methods and don’t fall for them. Examples:

• Don’t click on fake links
• Don’t give your password
• Don’t believe anything too good to be true
• Don’t provide any information found in the inspect element panel.

[WolfieCodesMent (Wolf)]

if your accounts are compromised the simplest thing todo is:

• do a full factor pc reset if you’ve installed malicious software
• reset all passwords (i know really annoying but will most likely need to be done)

dont reuse the same password for anything thats my only advice

[NyrionDev (Nyrion)]

Since multiple of your accounts, got hacked at once, it’s possible one of the following happened:

1. You re-used a password too many times, that password was easy to guess or appeared in a leak, then the threat actor tested that password against many of your accounts at once.
2. Someone gained access to your email, that you use as a master key for many of your accounts.
3. Someone stole your browser cookies, that store your browser sessions across many sites. This can happen by an extension, a bookmarklet, or even a virus installed on your computer itself.

To protect yourself from getting hacked in the future, I suggest you take the following steps:

1. Create a backup of all your passwords and important files on your PC (images, videos, etc, not games, software, or any complex files that you can re-download)
2. Do a format on your computer, erasing all its data, then install your backup to it (please ensure you did the backup process properly to avoid destruction of information).
3. Login into your mails (that you use as master keys to various sites) and change all their passwords to unique ones (don’t re-use passwords). After you change the passwords to your emails, through account settings use “log out from other sessions” button to invalidate other sessions/cookies a threat actor might have. Also do this with your microsoft account if you have one.
4. After you do all this, do the exact same process for your website and game accounts, that you store through the emails (or the passwords you stored in the backup). Ideally if you have accounts that you created once and never used again, for example at random sites, you can delete them all together, to avoid potential future leaks.
5. After doing all this exercise extra caution, don’t re-use passwords, don’t link accounts together through various pieces of information, don’t install extensions that aren’t highly trusted or you don’t really need, don’t install pirated games or movies outside of a sandbox/virtual machine, be cautious with your main machine.
6. If you have any other devices that use the mentioned accounts, for example a mobile phone, you should perform all the above steps there as well, in case this is the cause of the leak.

In general if your machines are completely compromised it’s a safer bet to backup whatever you can and reboot them from the very beginning, as if you first bought them, instead of trying to “clean” them. Viruses are very good at gaining persistence in a system. However most threat actors don’t focus on you specifically, which means that they may steal various of your credentials but not act fast upon it, this is what the above steps try to take advantage of. The slowness of the threat actor.

[imverysooproo (TIMMY)]

I never clicked any phishing links

[imverysooproo (TIMMY)]

Thank you so much! But can I ask does that mean my email got data breach? Since multiple my alt google account almost got hacked but I always turn on 2FA on it

[imverysooproo (TIMMY)]

And what makes me doubt is that my pc is my dad pc, I don’t have a permission from him to reset the factory pc so yeah. But I already have my anti virus and re-check anything

[NyrionDev (Nyrion)]

I can’t know for certain what happened specifically to you, I’m just doing predictions based on the things you said. You could check your emails for a message claiming that they stopped a login from an unknown location, that’s a good indicator most of the time.

[zNOOBx (NOOB)]

Not gonna lie I’m shocked your account got banned and didn’t get terminated for having multiple accounts like mine!

Speaking from experience, do not give ANY information about your account to anyone you don’t absolutely trust and know personally, especially on places like Discord.

~Everdreamer

[SeargentAUS (Seargent)]

A fairly easy way to check if your email has appeared in a databreach is to use the Have I Been Pwned site:

Have I Been Pwned: Check if your email address has been exposed in a data breach

It’s not got EVERY breach, but it seems to have a good number of them.

If it has (somewhat) recent breaches listed for your email, with the breach info including the password, then you definitely should change all your passwords and have them be unique from each other (you should do that anyway, but even more so)

[imverysooproo (TIMMY)]

First of all, I only have 2 alts roblox account but the third alt I don’t use it anymore, I use the second alt for playing other games or backup. The strange is the second alt not always get hacked, it always the third alt get hacked out of nowhere (luckily I don’t buy robux on there) and my main account is always get targeted.

I never share anything about my roblox account, not sure how they can come hacking at my account when I didn’t do anything

[XenoSniper2 (Xeno Sniper)]

Did your robux got stolen? if not you are now ok

[imverysooproo (TIMMY)]

Yes. According to my post, my robux already got stolen twice. I’ve losing hope roblox won’t do anything to me when I attempt to create second ticket, they’re said I already make the req last month so that’s why they’re decline it.

[AceVendarion (Ace)]

in addition to everything said above;

if you want your account to be easily recoverable

1. ID Verify your account - will be a lot easier to retrieve when you have an ID attached to it
2. Purchase ANYTHING so you have some form of billing history on the account, same reason above^
3. The obvious: 2FA, Email and maybe hardware keys depending on your rep

highly recommend doing all 3 of these^

[imverysooproo (TIMMY)]

Please re-read my post that my previous ticket is solved but this time I got hacked twice and roblox won’t do second rollback