Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help recover my Facebook account


  • Please log in to reply
13 replies to this topic

#1 NCJeff

NCJeff

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 01:13 PM

Hello can anyone help me recover my Facebook account , I'm not sure how or what happened I just know my account has been deactivated and when I try to login and go to support my messages and emails get redirected to whoever hijackled it and there telling me if I pay 399.00 I can get my account back



BC AdBot (Login to Remove)

 


#2 Moritz30

Moritz30

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 05 June 2017 - 01:19 PM

Please contact facebook using the form at https://www.facebook.com/hacked?refid=69 . Please reply if this helped or not ;)
White Hat, Security Researcher, Modder, CEO at and founder of @DragonTeamMC, @OmniDragonBot and CryptID. Real name is Matthias Merkel.

#3 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 01:26 PM

no that does not help I have tried everything that Facebook help pages say to do the problem is when I go to send them anything it gets redirected and never reaches Facebook at all  I get replys from a email address that I know is not legit , on the Facebook page it ask me to verify who I am by sending a picture ID i upload it and hit send then get reply back like you see below I added <---------this is phoney to an address i dont think is legit........................................................

May 14
Hi,

Thanks for contacting us. To protect this account's security, we can't give you access to it until we confirm that it belongs to you. To confirm that this account belongs to you, we'll need you to send a photo or scan of something from our ID list that confirms your identity:

https://www.facebook.com/help/159096464162185?ref=cr

You can help us confirm your identity in one of two ways:

- Send a photo or scan of one item from group one like a drivers license, passport or official name change paperwork

or

- Send a photo or scan of two different items from group two like a magazine subscription and a school ID or a bank statement and a membership ID

When you send us a photo or scan of something from the list, please cover up any personal information we don't need to confirm your identity (ex: credit card number, Social Security number). The info we need to see is: 

- Your name
- Your photo 
- Your date of birth

Once we confirm your identity, we'll help you move forward. Thanks for working with us to sort this out.

View updates from your Support Inbox: https://fb.me/8OYdZP0es4jAql   <---------------- this is phoney I do believe

Thanks,
 
10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG
10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG
10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG


#4 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 01:33 PM

this is the email address I get reply's from  <case++aazq4k2bcrljl2@support.facebook.com>



#5 Moritz30

Moritz30

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 05 June 2017 - 01:34 PM

Then reply to them with the documents they requested. Neither me not anyone else won't hack the account back or so just because you say it's yours but don't even want to verify it to facebook.

Edit: The email address may be legit. Helpdesk software often generates that strange addresses to link replies to a case.

Edited by Moritz30, 05 June 2017 - 01:35 PM.

White Hat, Security Researcher, Modder, CEO at and founder of @DragonTeamMC, @OmniDragonBot and CryptID. Real name is Matthias Merkel.

#6 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 01:52 PM

I think you just have a problem hearing and understanding , I CAN NOT CONTACT FACEBOOK I have uploaded the documents they want at least a dozen times each time Facebook does not get it it goes to who ever hacked the account, and furthermore I didnt come here asking you or anyone else to hack my account back its being held for ransom so its some kind of exploit or virus or something of that nature


Edited by NCJeff, 05 June 2017 - 01:55 PM.


#7 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 01:53 PM

Heres me uploading the id 3 times in one day Thanks,
 

10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG
10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG
10354686_10150004552801856_2203675011061
Your reply
May 14
Attachments
IMG_0654.JPG
 


#8 Moritz30

Moritz30

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 05 June 2017 - 01:54 PM

I think you just have a problem hearing and understanding , I CAN NOT CONTACT FACEBOOK I have uploaded the documents they want at least a dozen times each time Facebook does not get it it goes to who ever hacked the account


How do you see it goes to then instead of Facebook?
White Hat, Security Researcher, Modder, CEO at and founder of @DragonTeamMC, @OmniDragonBot and CryptID. Real name is Matthias Merkel.

#9 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 02:17 PM

Because everytime I try and contact them I get the same generic message telling me I need to send them a picture ID which I've done many many times and MAINLY the best clue is because when I get my reply  asking me for 399.00 for my account back  and FYI i just went back and counted since this has been going on there have been 74 messages sent and out of them 74 messages I attached my id 42 of those times



#10 Moritz30

Moritz30

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 05 June 2017 - 02:20 PM

Because everytime I try and contact them I get the same generic message telling me I need to send them a picture ID which I've done many many times and MAINLY the best clue is because when I get my reply  asking me for 399.00 for my account back  and FYI i just went back and counted since this has been going on there have been 74 messages sent and out of them 74 messages I attached my id 42 of those times


Big companies like Facebook use canned responses. That means that they don't type the message but just press a few buttons.

When do you get the ransom requests?
White Hat, Security Researcher, Modder, CEO at and founder of @DragonTeamMC, @OmniDragonBot and CryptID. Real name is Matthias Merkel.

#11 NCJeff

NCJeff
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:07:26 PM

Posted 05 June 2017 - 02:50 PM

To any of the malware team members I'm not 100% sure but am thinking this happened with an XSS injection and I doubt you can provide any help but I'm desperate so came here to give it a shot , if I'm correct then that means its nothing on my computer and is in the account itself so no way anyone but Facebook can help , just looking for verification on that



#12 Moritz30

Moritz30

  • Members
  • 69 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:26 AM

Posted 05 June 2017 - 02:57 PM

To any of the malware team members I'm not 100% sure but am thinking this happened with an XSS injection and I doubt you can provide any help but I'm desperate so came here to give it a shot , if I'm correct then that means its nothing on my computer and is in the account itself so no way anyone but Facebook can help , just looking for verification on that

XSS could indeed lead to a compromised account (even though I don't know any part of Facebook that is vulnerable against XSS) but it would not explain redirected emails.


White Hat, Security Researcher, Modder, CEO at and founder of @DragonTeamMC, @OmniDragonBot and CryptID. Real name is Matthias Merkel.

#13 jwoods301

jwoods301

  • Members
  • 1,489 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:03:26 PM

Posted 05 June 2017 - 03:03 PM

To any of the malware team members I'm not 100% sure but am thinking this happened with an XSS injection and I doubt you can provide any help but I'm desperate so came here to give it a shot , if I'm correct then that means its nothing on my computer and is in the account itself so no way anyone but Facebook can help , just looking for verification on that

 

To verfiy that, try accessing your Facebook account from another computer (preferably not on the same network).

 

If you get the same result, then you are correct.



#14 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,055 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:06:26 PM

Posted 05 June 2017 - 05:35 PM

Topic moved to more appropriate forum.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users