I found a USB drive in a very isolated spot at my school. It has a heart-shaped keychain, and I have no idea who it belongs to.

I haven't plugged it in because I'm concerned it could be a USB Killer, which might physically damage a computer through electrical discharge, or a malicious USB device designed to act as a keyboard and run commands when connected.

Is there a way to determine what kind of device it is and inspect its contents without exposing my laptop or other devices to those risks? I'm curious about what's on it, but I don't want to risk damaging my computer or compromising its security.

Ciao a tutti, a partire dal 4 ottobre ho subito attacchi hacker ripetuti in seguito. Avevo provato a scaricare Boodborne per PC e credo che i file di gioco contenessero un trojan. Mi sono entrati ovunque e diffuso foto di MrBeast in tutti i modi possibili. Recuperato sempre tutto, tranne account Linkedin ad oggi bloccato.
Pc formattato oggi alle 14.00 dopo che al mattino mi sono arrivate mail minatorie e di minaccia. Mail non inviatemi, mail scritte da DENTRO al mio account outlook, messe in bozza e poi spostate nella posta in arrivo, contrassegnate e flaggate: così le avrei viste di sicuro.
Non riesco ad uscirne. non so come liberarmi di queste mail. Io le cancello e loro puntalmente ritornano. Le vedo proprio apparire.
Ricevo chiamate, messaggi di transazioni non esistenti e anche i miei genitori hanno iniziato a ricevere telefonate del genere.
Sto andando nel panico.
come posso liberarmi di tutto questo?
Allego un estratto della mail.
penserei di ignorare tutto, ma l'attacco hacker era reale e mi ha costretto a runnare antivirus e formattare. Ci combatto da piu di una settimana.

Hello. I have a Microsoft account that I’ve had for years, this Microsoft account was at first a gmail account than I made a Microsoft version of it, the handle, completely the same. I recently realize that my Microsoft account was hacked and the Microsoft email was now invalid. I do not know how to fix this and I’m worried. I keep all my information on the Gmail, not the Microsoft account and the passwords are completely different with the Gmail having double security. Is my Gmail doomed or is it just Microsoft that’s screwed? Is there a way to get my account back?

I prefer assistance to just be in the comments just to be wary of scammers.

Am I the only one getting
- spam bots tagging my twitter
- explicit/strange thumbnails on youtube
- similar spam emails coming in
- ads and netflix/amazon programs have been in a different language
- personal instagram full of random foreign male accounts

I don’t want to ignore it if so. is it my server or IP? what’s actually happening since it’s normal? (iOS)

I posted the URL and some people replied call med an idiot. I didn't know at the time but researched it and apparently people who copy pasted that URL can get full access to my account? I changed my password just in case but I'm wondering if someone could have used that to compromise my account and if changing the password would have made any difference?

It was a link to a Youtube video.

Thankyou.

I want to understand the process and am exploring my options!

​

Hi

(I'm minor and Indian)

So like last December, I sent b00b pics to this guy online on snap. Now I can't recall if my face was in the pic or not. He neither saved them in chat nor did he screenshot them. A few days later I saw that his account was no longer active.

\----present-----

I recently added him again and asked him if still remembers me and has my pics. I sent him my face pic and then deleted it quickly, He said he does remember me but doesn't possess those pics.

Later he unadded me. After sometime I added him again and I have been asking him again and again, and he keeps on saying he doesn't even remember my face, and he doesn't have my pics.

I added another account of his. Asked him again, he said no, and got scared.

Idk I'm so scared. What if he had them saved on second device and leaks them or something? What if my face is actually visible in it?

(I'm minor and Indian) I also have screenshots of our recent chats

Hello everybody!
Recently i've been looking into Meta and i wanted to change my location entirely from it but it seems like it's not as easy.

(*I have NordVPN and I have an iPhone.*)

I changed my location to USA using NordVPN (I live in Europe).
I then reinstalled Instagram, logged in, but it was the exact same country and city as where I currently was.

So when I realized that the VPN didn't work I did some research about this and Meta can supposedly bypass VPN's and many other things.
Im using a second phone, so I don't even have a SIM Card on this phone.
My location services are also off entirely.

I did find out tho that using a VPN browser extension on my PC works.
I also have Nord downloaded on my PC as a program and it still doesn't work as good, but if you use a VPN Browser Extension instead then it works perfectly fine and it changes the location entirely.

Problem with that tho is that you can't really use Instagram on your browser since unfortunately you are limited to lots of things and you can't properly use it but im pretty sure there are ways of hiding your location from IG and other apps on your iPhone.
If you know any ways of fully changing your iphones location please let me know!

Hi everyone,

I’m looking for people who may have experienced the same thing, or anyone who can help me understand what happened.

I was browsing what I believed was the legitimate Python website when I encountered a fake CAPTCHA page. It instructed me to open Terminal on my Mac and paste a command to verify that I was human.

Unfortunately, I followed the instructions and executed the command. Looking back, it was a mistake. The command used a Base64-encoded payload, and after decoding it, I was told it appeared to download and execute a shell script from a suspicious domain.

Immediately after running it, a small window or prompt appeared asking for a password. I closed everything right away and did NOT enter my password.

Afterward, I noticed a suspicious file in my user folder with a name resembling com.Apple.fzylihcshhojvmnr. I also noticed Bash listed under Login Items.

Here’s what I’ve done so far:
- Changed my Apple ID and Google account passwords using another device.
- Ran a Malwarebytes scan, which reported no threats found.
- Had the suspicious file quarantined and deleted it.
- Restarted my Mac and checked running processes, network connections, and LaunchAgents/LaunchDaemons.
- Investigated several unfamiliar-looking processes that turned out to be legitimate macOS components.

My Mac is an Intel MacBook Pro running macOS. I also use it to access a VPS over SSH, so I’m concerned about whether my SSH private key, browser sessions, or other credentials could have been exposed.

My questions:

1 Has anyone encountered this specific fake CAPTCHA / Terminal attack on macOS?
2 Does the password prompt sound familiar? Could it have been part of the malware’s attempt to obtain elevated privileges?
3 Has anyone seen a suspicious file or Login Item with a name like com.Apple.fzylihcshhojvmnr?
4 Is there a known way to determine what the downloaded script actually did, or whether it established persistence?
5 Given that Malwarebytes found nothing afterward, would you consider a clean macOS reinstall necessary, especially on a machine used to administer servers?

I’m not assuming the Mac is clean just because the scan came back negative. I’d really appreciate firsthand experiences, technical analysis, or links to reports of similar attacks.

I can share the original command or the decoded script if I can recover it safely

Thanks!

I maintain a small open source Python project (a terminal world clock): https://github.com/ACoci86/terrahour

Since Monday, seven new GitHub accounts have each created a repository with the same name, my README, my screenshots and my description. They are not forks and share no git history with mine. Every one contains the same placeholder code, a Python file with def main(): print("ok") plus filler comments, and between 70 and 220 commits backdated to early 2025. My project’s first commit was 1 October 2026. Most of them received new commits today, so whatever is generating them is still running.

Examples: https://github.com/Perez39094/terrahour and https://github.com/kerstin89/terrahour. The others are renferrara26, naoki7189, achaudhry2228, JorgeNascimento31017 and utku91, all with a repo called terrahour.

What I’ve done so far: reported the first two through GitHub’s “Report repository” form, and blocked the accounts. Nothing has been removed yet, about 24 hours in.

What I’d like to know:

1. Is there any real risk to me, my repository or my PyPI package from this, or is it just noise? My concern is someone publishing a lookalike package or putting malware in one of the fake “releases” that some of these repos have.
2. Should I do anything beyond reporting? I’ve seen advice ranging from “ignore it” to filing a DMCA.
3. Does anyone recognize what these accounts are typically used for? I’ve read about fake-star networks but I’m not sure this is the same thing.

Many thanks for your time!

I've been receving a lot of request to reset my instagram password on my email. The other day I even got a code for creating an account on upsampler but it wasn't me. What happened? is this a human or some bot? what can I do to pretect my account and digital identity? Any help is appreciated. Did someone had a similar experience?

Few weeks ago my sim got blocked, and I came to know it was because of cyber cell, some of you may know the whole story, as I've posted it earlier...

After sometime my bank account too got blocked and I got to know the reason was that someone sent me the money, that "the person" had the illegal money so I got stuck in the chain.... I got my account unblocked

Now I want to know the actual reason behind the blockage of my sim, where can I know about it ?

I don't want to go to police station or cyber cell

is there any good courses or online resources

I was hacked recently, found my discord and instagram account sending the Mr Beast scam, my main reddit account s*xting other people and telling them to add their telegram (my main reddit is suspended now).

I have changed my gmail, discord, instagram and reddit passwords as those are the ones that were saved on my laptop Chrome.

I’ve also ran a FRST scan and the Lummastealer had been removed.

My laptop battery also just broke right after (a bit too coincidental but yes) so now I can barely use it for 3 minutes whilst charging before it shut downs. So now i can’t really reset/wipe my laptop.

What now? I’m very anxious because I also have my parents banking details on it, my school/education passwords etc.

Would doing a complete factory reset seeing how my battery doesn’t work anymore and the laptop can’t be used, be effective at stopping the program keep accessing my details?

Sorry if this is a dumb question -

I recently switched all my Gmail 2 step verification from my phone number to an authenticator app because I’m scared of sim swaps lol

But I still have a prompt to add a “recovery phone” number - is that just as much a bad idea as having my number as my 2fa?
Thanks

Title sums it up. I know this person is continuing to post about me when l've asked them to stop. Private account.
Anyone willing to follow them for me and send me the screenshot evidence? Preferably a punk rock / motorcycle/ mechanist type feed. Thank you in advance.

We’ve all been there, you install a security suite to stay protected against phishing and modern malware, and suddenly your system performance tanks, fans start heating during basic tasks, and background scans hog half your CPU cycles. For anyone working heavily across desktop files and web browsers, finding a reliable antivirus that doesn't slow down your computer feels like looking for a unicorn.

I’ve been comparing a few different security options lately, including Malwarebytes, Bitdefender, and McAfee, but I am still cautious about how heavily these options impact everyday multitasking and battery life and whats the lightest of them all.

I was hacked a month ago and i did changed all the password and 2fa, even resetted the PC window

Now yesterday u got an email about account been locked and i need to verify it, i did and went to sleep. During sleep i got the password reset but now i cant log in.

It shows this and these aren't my emails.

Cant acces ur email isnt working, coz it said like you'll be able to login via that email but when i did it made a bew account.

And the new email req eas rejected in a email saying verification is bad.

What should i do?