Earlier this week, I got an email saying one of my social media accounts had an unusual login, but it was nearby, and sometimes that happens normally when my one tool uses a different server, etc. or a bot runs from another setup. Not necessarily “me” accessing, but things that I authorized to access showing up on a server in another city nearby. It usually doesn’t do anything else, and often it isn’t even successful. I have a few accounts that didn’t quite have my latest passwords on them, but they were decent enough.

Tuesday, I went to a coffee shop in Nepean, and my VPN on my laptop wasn’t working. However, I also played an online game on Tuesday night that has a lot of stuff going on to run it. One or the other could have compromised my access, I suppose.

I’ve spent a lot of time tonight rebooting accounts, changing passwords, logging any other access out, and generally being paranoid AF. Of 8 things I use regularly, it compromised the four easiest. The second tier wasn’t hacked, and the third tier doesn’t look like it was even viewed. I still upgraded a ton of passwords tonight using a combination of tools and double-checking 2FA. Most are fine, and are the reason I was able to recover what I did. One remains outstanding, not that critical.

Still, quite annoying and tiring. My protections around the castle engaged when the Trojan Horse was opened, and mostly worked as intended. I’d like to write in more detail, but that would be incredibly stupid.

The bigger question is the vector of attack. One of the vectors may have started before Tuesday, except I can’t think of where or how really. The wifi network would be the obvious idea, or if I had used wifi while I was in New Orleans. But the whole time I was in New Orleans, I only used my phone as a hotspot, no wifi. Hmmm…

The fun that remains is when I go to access an app on my phone or load something on another computer and it says, “NO! You shall not pass!” because I haven’t logged into it with the new passwords.

How was your night?