Help! Somebody spoofing my whatsapp / facebook - Security Discussion

Hello,
Somebody has the ability to message my contacts on WhatsApp, despite me changing my phone (have tried both Android / iPhone). Not only are they controlling my WhatsApp, but they also have the ability to post stuff as me on Facebook too, which is quite scary (again on both iOS and Android).
Here's the really strange thing. They are now sending my contacts messages via WhatsApp appearing to be from my mum. My mum does not know what WhatsApp is, let alone use it - her phone doesn't even support internet (it's a Sony Ericsson T68i). How is this even possible?? I'm guessing they've found her contact on my phone (it's stored as 'mum').
I have no answers to any of this, I initially thought my Android phone had been hacked, but the problem is occurring on my iPhone too. My mum's phone has no internet, it doesn't even have a MAC address I believe, so they can't be spoofing via that method??
Help!

SuperSub100 said:
Hello,
Somebody has the ability to message my contacts on WhatsApp, despite me changing my phone (have tried both Android / iPhone). Not only are they controlling my WhatsApp, but they also have the ability to post stuff as me on Facebook too, which is quite scary (again on both iOS and Android).
Here's the really strange thing. They are now sending my contacts messages via WhatsApp appearing to be from my mum. My mum does not know what WhatsApp is, let alone use it - her phone doesn't even support internet (it's a Sony Ericsson T68i). How is this even possible?? I'm guessing they've found her contact on my phone (it's stored as 'mum').
I have no answers to any of this, I initially thought my Android phone had been hacked, but the problem is occurring on my iPhone too. My mum's phone has no internet, it doesn't even have a MAC address I believe, so they can't be spoofing via that method??
Help!
Click to expand...
Click to collapse
maybe some other app required permission to access your whatsapp or something like that and now using it.

le grande magnetto said:
maybe some other app required permission to access your whatsapp or something like that and now using it.
Click to expand...
Click to collapse
Across two devices? I have had to verify whatsapp on each device with an SMS each time.
He sent my contact another message today stating that I will never catch him and that he is using the same IP as me. Arghhhhhhhhhhhh!!

SuperSub100 said:
Across two devices? I have had to verify whatsapp on each device with an SMS each time.
He sent my contact another message today stating that I will never catch him and that he is using the same IP as me. Arghhhhhhhhhhhh!!
Click to expand...
Click to collapse
No, it is not needed.
Have you tried changing password?

le grande magnetto said:
No, it is not needed.
Have you tried changing password?
Click to expand...
Click to collapse
Yup - changed every password. A simple search reveals it's quite easy to spoof a whatsapp account, which I believe he's doing. No idea how to stop it and how he managed to access my FB too.
FB sign in logs shows nothing suspicious, so he's doing it through my phone.
Have contacted WhatsApp support, not sure what else I can do.
Might change my mobile number, but that is so much hassle!

SuperSub100 said:
Yup - changed every password. A simple search reveals it's quite easy to spoof a whatsapp account, which I believe he's doing. No idea how to stop it and how he managed to access my FB too.
FB sign in logs shows nothing suspicious, so he's doing it through my phone.
Have contacted WhatsApp support, not sure what else I can do.
Might change my mobile number, but that is so much hassle!
Click to expand...
Click to collapse
You should go to FB settings and in Apps/Programs (not english FB currently) and disable access to whatsapp.

Related

Hacker on palringo

..
nikko1000 said:
some idiot at Palringo hacked my IM accounts.....all people who have been hacked, please contact me, so we can try to bring this company down!
195.97.243.239 is the ip address that i tracked down as the hacker, and the first company that shows up on this ip address is
IP address: 195.97.243.239
IP country: United Kingdom
IP Address state: Middlesbrough
IP Address city: Middlesbrough
IP latitude: 54.5728
IP longitude: -1.1628
ISP: Onyx Internet Ltd
Organization: Palringo
BEWARE ALL ANDROID USERS - NEVER EEEEVER USE PALRINGO
- if you got hacked - send my a pm at my youtube account - sleepyboyproduction
(i can't really put my email out.....its too dangerous atm)
Click to expand...
Click to collapse
What makes you think it was someone at palringo that did it?
more detailed explanation
TechnoHippie said:
What makes you think it was someone at palringo that did it?
Click to expand...
Click to collapse
Let me make this more clear for you.... I recently downloaded the palringo app....that comes from palringo....I got a message from my server that says an ip address in the UK has been searching through my accounts. So I tracked them down, and it went straight to palringo. The application stole my account info
@nikko1000
Actually your explanation isn't very clear.
nikko1000 said:
I got a message from my server
Click to expand...
Click to collapse
What server? How did you get this message?
nikko1000 said:
an ip address in the UK has been searching through my accounts.
Click to expand...
Click to collapse
"searching through my accounts"? What does this mean? And what accounts: accounts of IMs that you have connected to your Palringo account?
nikko1000 said:
The application stole my account info
Click to expand...
Click to collapse
What account?
Brut.all said:
@nikko1000
Actually your explanation isn't very clear.
What server? How did you get this message?
"searching through my accounts"? What does this mean? And what accounts: accounts of IMs that you have connected to your Palringo account?
What account?
Click to expand...
Click to collapse
- ok maybe you don't get this...
1. I downloaded palringo on my android phone
2. I got a message saying that i can't log in on the app
3. I went online, and i got a message from my email, saying that there is suspicious activity on several accounts, coming from 1 ip address
4. I looked up the IP address, it went straight to palringo
5. I posted this up, and complained multiple times, and looked up other people having the same problem.
nikko1000 said:
- ok maybe you don't get this...
1. I downloaded palringo on my android phone
2. I got a message saying that i can't log in on the app
3. I went online, and i got a message from my email, saying that there is suspicious activity on several accounts, coming from 1 ip address
4. I looked up the IP address, it went straight to palringo
5. I posted this up, and complained multiple times, and looked up other people having the same problem.
Click to expand...
Click to collapse
So what happens when you try to log into palringo via there desktop app?
You said you were able to check your email - so does this mean your IM accounts that palringo uses are still working?
You didn't answer most of my questions, but nevermind...
Why is it so weird and suspicious to you, that there were connections from Palringo IP, if this is exactly what Palringo should do?
Brut.all said:
You didn't answer most of my questions, but nevermind...
Why is it so weird and suspicious to you, that there were connections from Palringo IP, if this is exactly what Palringo should do?
Click to expand...
Click to collapse
you're still not getting this - they showed that they logged in with their ip address, and changed information on mine, without permission, obviously meaning that they logged in, with the info that was given to them
they showed obvious proof that they were trying to change my password, so i had to recover it through my cellphone
nikko1000 said:
they showed obvious proof that they were trying to change my password, so i had to recover it through my cellphone
Click to expand...
Click to collapse
Please describe the "obvious proof".
unable to log into my account, with my password.....
nikko1000 said:
you're still not getting this - they showed that they logged in with their ip address, and changed information on mine, without permission, obviously meaning that they logged in, with the info that was given to them
Click to expand...
Click to collapse
Yeah, but this is how Palringo works - it connects to services from Palringo servers. So if e.g. someone guessed your Palringo password, then he got access to all your connected accounts and all connections were from Palringo IP.
I mean: that may not be a guy from Palringo, but anyone who got access to your Palringo account.
this is not a random person, my password is practically un-guessable.... its a 20 letter code.... example : XAO352Fs3934HOe93kdj..... and who would have access to my account? i don't share my password, or my cellphone
nikko1000 said:
unable to log into my account, with my password.....
Click to expand...
Click to collapse
1. WHICH Account? Do you mean just your palringo account, or all the IM accounts you are using with it?
Here is my guess of what's happened.
You installed Palringo on your Android device, started up and everything looks normal.
Now ONE (or maybe more?) or your IM accounts is indicating there was some weird activity.
You went to whatever IM account and noticed a bunch of connections from the palringo servers. (This is OK and actually not a problem - as that's how the palringo service works)
Thus - your handheld is probably logging you out and logging you in again over and over - which causes your IM service to think there is a problem when there is not. Either your 3G is going off or your wifi is going off - prolly when you put your phone in standby.
TechnoHippie said:
1. WHICH Account? Do you mean just your palringo account, or all the IM accounts you are using with it?
Here is my guess of what's happened.
You installed Palringo on your Android device, started up and everything looks normal.
Now ONE (or maybe more?) or your IM accounts is indicating there was some weird activity.
You went to whatever IM account and noticed a bunch of connections from the palringo servers. (This is OK and actually not a problem - as that's how the palringo service works)
Thus - your handheld is probably logging you out and logging you in again over and over - which causes your IM service to think there is a problem when there is not. Either your 3G is going off or your wifi is going off - prolly when you put your phone in standby.
Click to expand...
Click to collapse
that is probably what happened.... but how do you explain the fact that my password was changed on facebook, and gmail?
nikko1000 said:
that is probably what happened.... but how do you explain the fact that my password was changed on facebook, and gmail?
Click to expand...
Click to collapse
Good question. It *does* sound like you hacked somehow - but I seriously doubt that anyone at palringo had anything to do with it.
Either someone got your palringo username/password and then changed your passwords to gmail and facebook via that (if you even can) - or you were hacked some other way.
I would take a close look at your home computer (or any other machines you've used lately) and make sure you have no virus / trogans / mailware etc on those because odds are that's actually where the hack happened.
Have you had any luck recovering your facebook and gmail accounts? What a bummer I know how bad that sucks.
So, IP addresses usually point to ISP s... How did you track and identify this organization or individual?
Sent from my Nexus One using XDA App
He bactrack it and now there's going to be serious consequences
.... Hope someone gets this :0
chibixzero said:
He bactrack it and now there's going to be serious consequences
.... Hope someone gets this :0
Click to expand...
Click to collapse
he done goofed
I'm still waiting to see actual evidence.... Otherwise, as they say, pics or it didn't happen.

[Q] Server search on Gmail doesn't work - says "can't connect"

I added the GMail account through Google option (haven't tried the POP and IMAP).
It syncs fine, but it doesn't do a server search. Whenever I try it, it returns an error saying that it can't connect to the network.
Anyone knows how to fix it?
P.S. And how come there is not even an option to do server search for Hotmail?
Additional data:
- I'm using Samsung Focus with Mango
- device is unlocked, but branded to AT&T (not sure if it has anything to do with Gmail)
- tried both on 3G and WiFi
Thanks!
dangub said:
I added the GMail account through Google option (haven't tried the POP and IMAP).
It syncs fine, but it doesn't do a server search. Whenever I try it, it returns an error saying that it can't connect to the network.
Anyone knows how to fix it?
P.S. And how come there is not even an option to do server search for Hotmail?
Additional data:
- I'm using Samsung Focus with Mango
- device is unlocked, but branded to AT&T (not sure if it has anything to do with Gmail)
- tried both on 3G and WiFi
Thanks!
Click to expand...
Click to collapse
I have the same problem. It was present in 7712 and still is in the retail release of 7720. I also have a Samsung Focus, but I doubt that is the cause. I'm considering deleting the Google account from the phone and adding it back, but I hate to have to relink all of the contacts whose names are different from Facebook. Considering how Google has blocked non-primary calendars for Windows Phone and their event/invitation implementation is somewhat broken with Windows Phone, it wouldn't surprise me to learn that server search is also a broken feature, whether intentional or not. Has anyone had any success re-creating the Google account on the phone?
i've noticed the same problem! I hope this is just an issue of me just setting up my account wrong
steve10 said:
Has anyone had any success re-creating the Google account on the phone?
Click to expand...
Click to collapse
That was the first thing that I tried. No success
I also have this issue.. I have not heard anyone had any success...
same issue. . . -.- Hope MS will fix it
It´s Google´s problem, not Microsoft´s
same .... earger for a hotfixxxxx!!!! pls
I know
Sent from my PG86100 using xda premium
this is seriously annoying
I guess gmail wants us to go android, but I won't. I'm going to add another email account and suffer through. Fortunately for me I don't have a lot of important contacts with gmail.
I reported this to Microsoft a few weeks ago, and they are aware of the issue. I'm thinking it must be on Google's side. When labels come to Hotmail, I may just switch over entirely.

A virus on my phone????

Hi Guys,
I have recently installed the 12070 F/W on my Lumia 800 phone and last night an email was sent out to all 500 contacts that I have for no reason. There was an email attachment in the form of a web address which, when opened, brought you to a page in a magazine called Business Journal.
I am really worried this morning. I need to email all of my contacts wo warn them of this. But what do I do with the phone, do I have a virus on it? If os, how di it get tehre and what do I need to do to remove it??
Guidance right now much appreciated.
First of all, this topic does not belong to the Windows Mobile section. The second thing is that there are no viruses for lumias. Check all the apps you installed and on marketplace check if they can access your contacts information (Bottom of every app description page)
17-apg said:
Hi Guys,
I have recently installed the 12070 F/W on my Lumia 800 phone and last night an email was sent out to all 500 contacts that I have for no reason. There was an email attachment in the form of a web address which, when opened, brought you to a page in a magazine called Business Journal.
I am really worried this morning. I need to email all of my contacts wo warn them of this. But what do I do with the phone, do I have a virus on it? If os, how di it get tehre and what do I need to do to remove it??
Guidance right now much appreciated.
Click to expand...
Click to collapse
no, actually impossible..
There are two possibilities:
- an app that access your contacts sent them to their server and the owner sent bunch of emails
- your password has been hacked
It's very unlikely that the emails came from your phone. Email gets hacked all the time through weak passwords or cross site scripting exploits. Reset your email password and security questions and update any web browsers you use.
Ask one or more of your recipients if their emails at the bottom says "Sent from My Windows Phone" - unless you've edited it, your signature must have gone along with your email if it went from your inbox. However if it's some app or a password hack, they won't see that signature.
This will also be a good way to see if the emails went from your phone or from a desktop PC.
drupad2drupad said:
Ask one or more of your recipients if their emails at the bottom says "Sent from My Windows Phone" - unless you've edited it, your signature must have gone along with your email if it went from your inbox. However if it's some app or a password hack, they won't see that signature.
This will also be a good way to see if the emails went from your phone or from a desktop PC.
Click to expand...
Click to collapse
Good call on that one. The signature is a great way to find out.
Your contacts in your email was hi-jacked; change your password as soon as possible.

Where does Android store email password?

Hello
I'm using LG Optimus Black 4.0.4 - stock rom, rooted.
I want to transfer my company email account from default email application to K-9 email app. But i dont remember the password. Is there any location that we can see the password? I've found wi-fi passwords as plain text. I hope I can read email password too.
dnzksr said:
Hello
I'm using LG Optimus Black 4.0.4 - stock rom, rooted.
I want to transfer my company email account from default email application to K-9 email app. But i dont remember the password. Is there any location that we can see the password? I've found wi-fi passwords as plain text. I hope I can read email password too.
Click to expand...
Click to collapse
Why not reset the password (or click on 'Forgot Password')?
That way you can create a new password, and log in using that. :good:
dnzksr said:
Hello
I'm using LG Optimus Black 4.0.4 - stock rom, rooted.
I want to transfer my company email account from default email application to K-9 email app. But i dont remember the password. Is there any location that we can see the password? I've found wi-fi passwords as plain text. I hope I can read email password too.
Click to expand...
Click to collapse
u can reset the pass.
this is like stealing!!!
immortalneo said:
Why not reset the password (or click on 'Forgot Password')?
That way you can create a new password, and log in using that. :good:
Click to expand...
Click to collapse
what are you talking about? did you understand what i said? ı am using android email application. not web page.
I want to see my password on my phone. I have found that it is stored in a DB file. I need this file's location.
dnzksr said:
I want to transfer my company email account from default email application to K-9 email app. But i dont remember the password.
Click to expand...
Click to collapse
dnzksr said:
what are you talking about? did you understand what i said? ı am using android email application. not web page.
I want to see my password on my phone. I have found that it is stored in a DB file. I need this file's location.
Click to expand...
Click to collapse
Of course I understood you mate. You want to use K-9 email app to manage your company email account, right? But you don't remember it's password. So, the easiest way is to reset the password and set a new one. Then you can enter the new one in the K-9 app and login! Simple. :good:
dnzksr said:
what are you talking about? did you understand what i said? ı am using android email application. not web page.
I want to see my password on my phone. I have found that it is stored in a DB file. I need this file's location.
Click to expand...
Click to collapse
XDA gets very suspicious when someone new signs up to the forum and their first question is about something that could easily be used to obtain hidden information that you shouldn't do.
How do we know that you are not trying to access someone else's email password without their permission?
If this is, truly, for your own work email then just ask the IT department to reset your password - but it is highly doubtful you have really forgotten your work password and sounds dodgy.
I had a similar problem as well. My email password could not be changed, there was no way to recover the password through the provider, and the workaround would have been to wait a few months for the account to be deleted and then reregister. Thankfully, I found the solution with a little googling.
Browse to /data/user/0/com.android.email/databases and copy EmailProvider.db to your computer. Other phones might have their database in a different location. Download and install Sqlite Database Browser from sourceforge.net if you haven't, and then skip down to the sqlitebrowser instructions here:
http://ubuntu42.blogspot.com/2011/11/android-recover-mail-password.html
Decrypt the password
On samsung phones, the passwords in /data/user/0/com.android.email/databases/EmailProvider.db are encrypted. You will need to use the 'samsung-password' decryption tool: lovasoa.github.io/samsung-email-password-decrypt/
SimonTS said:
XDA gets very suspicious when someone new signs up to the forum and their first question is about something that could easily be used to obtain hidden information that you shouldn't do.
How do we know that you are not trying to access someone else's email password without their permission?
If this is, truly, for your own work email then just ask the IT department to reset your password - but it is highly doubtful you have really forgotten your work password and sounds dodgy.
Click to expand...
Click to collapse
O STF up do you know how many emails i have? No But i'll tell you 2 personal 3 for work a spam and 2 for shopping not everyone likes using one or two emails for 700 things. you know how hard it can be at times to remember passwords... tell me haven't forgotten a password and wish you could just recover it without having to fight to reset it. sometimes it's not as simple as yahoo where you don't even have to be the owner of the ****ing email to to reset it. Not only that but again he has it on his old phone trying to put it on his new phone or switch apps to something simpler... i'm with him i have about 4 phones with emails on them i don't even remember making... so NO actually he sounds like a legit worker that is tyring not to a piss off the I.T. guys by giving them more **** tastic jobs that we just loving doing. because it's not like we don't have More pressing matters to attended to like fixing your printer that people like to over cram so they have to refill it less often. or constantly keeping you in work by repairing your computers that crash on you well you are doing graphs and slide shows. we would love to stop all that to reset your password you should have put in a secure place to begin with.
Scornedlodas said:
O STF up...
Click to expand...
Click to collapse
TLDR...
Did you really create an account just so you could respond abusively to my post from 4 1/2 years ago? Srsly?
immortalneo said:
Why not reset the password (or click on 'Forgot Password')?
That way you can create a new password, and log in using that. :good:
Click to expand...
Click to collapse
maybe can you contact customer service?
https://images.app.goo.gl/hb7wgTc3ska4xGQg8
Sent from my OnePlus7Pro using XDA Labs

Strange ads in messaging thread

Hello,
After having been away form Android for awhile i just switched to the Note 8. I've only had the phone a few days but I've noticed an odd issue and was hoping someone could help because my web searches aren't finding much.
Every so often when i send a text message it is followed by an ad. On screen it looks like like a web preview (sort of like when you text a link to someone, that little preview of the page you sent). At first i thought that i had somehow linked something to someone by accident.
It appears on screen exactly like i was the one who sent it. Also, the ad shares the same time stamp as the text i actually did send. The people I'm texting don't appear to be able to see them though.
I've not downloaded anything that i can think of that would be at all sketchy, so im not sure what gives. Ive tried to search for mention of this from others but web searches related to text come up with all manner of things. If anyone has seen this before or has any advice it would be greatly appreciated.
Thanks very much
So you must have something thing sketchy downloaded.
Did you get the AT&T phone from AT&T or Samsung? Are you using it on AT&T network or do you use a 3rd party carrier?
There are only a few things that could be doing this.
1.) you downloaded a sketchy app and gave it permission to see/use messages and or contacts
2.) you are using a 3rd party messaging apps without realizing it
3.) you are using an off brand carrier that is pushing ads to your phone through one of there apps.
I'd start with seeing what apps have access to your messages, Even system apps, in your app permission settings. If you see something sketchy with access turn off that permission
If you are using a 3rd party carrier then you may have to try to find the app they are using to push ads and use "BK Disabler" to block it.
Snakemanc6 said:
Hello,
After having been away form Android for awhile i just switched to the Note 8. I've only had the phone a few days but I've noticed an odd issue and was hoping someone could help because my web searches aren't finding much.
Every so often when i send a text message it is followed by an ad. On screen it looks like like a web preview (sort of like when you text a link to someone, that little preview of the page you sent). At first i thought that i had somehow linked something to someone by accident.
It appears on screen exactly like i was the one who sent it. Also, the ad shares the same time stamp as the text i actually did send. The people I'm texting don't appear to be able to see them though.
I've not downloaded anything that i can think of that would be at all sketchy, so im not sure what gives. Ive tried to search for mention of this from others but web searches related to text come up with all manner of things. If anyone has seen this before or has any advice it would be greatly appreciated.
Thanks very much
Click to expand...
Click to collapse
I have also noticed it when I switched back to the stock messages. What's being displayed is a preview of the web link from the text message. Somehow you enabled it when setting up the messages app. Hope this helps.
Sent from my SM-N950U using Tapatalk
I was getting this too. I think I have tracked it down to AT&T Messages Backup & Sync. I believe they are using it kind of like someone doing a MITM attack. believe this because if I wipe all my messages and restore from Samsung backup (with affected message included) the message is not there. If I restore just based solely on the AT&T Messages Backup & Sync backup, then it is there.
j0nkatz said:
I was getting this too. I think I have tracked it down to AT&T Messages Backup & Sync. I believe they are using it kind of like someone doing a MITM attack. believe this because if I wipe all my messages and restore from Samsung backup (with affected message included) the message is not there. If I restore just based solely on the AT&T Messages Backup & Sync backup, then it is there.
Click to expand...
Click to collapse
I recommend disabling ALL AT&T bloat crap.
ShrekOpher said:
I recommend disabling ALL AT&T bloat crap.
Click to expand...
Click to collapse
The sad part is that NumberSync on ATT requires Messaging Backup. Time to move to TMO or something.
j0nkatz said:
The sad part is that NumberSync on ATT requires Messaging Backup. Time to move to TMO or something.
Click to expand...
Click to collapse
Use hangouts or Allo or Signal messenger instead of the ATT messaging app and sync you contacts to Google.
No need to use ATT apps at all.
I just bought the Note 8 and the first time I opened the Messages app it asked if I wanted to turn web previews on. You may have said yes to that and maybe that is what you are seeing. Go to Messages, Settings, More Settings, and then see if Web Preview is enabled.
j0nkatz said:
The sad part is that NumberSync on ATT requires Messaging Backup. Time to move to TMO or something.
Click to expand...
Click to collapse
I use number sync with my gear s3 and don't use that crap att messageing backup so I'm not sure what you mean!
Sent from my [device_name] using XDA-Developers Legacy app

Categories

Resources