Chat support available. Click the chat icon on the bottom right corner to start chatting with us right away!

mSecure Support

base di conoscenza Invia un biglietto

Hackers are now attempting to get into my accounts

In the past two days, hackers have attempted to access and change the passwords on my Facebook (5 attempts within 1 hour), Instagram, Microsoft and now Google accounts. I’ve never had this happen before. Fortunately, I have two-factor authentication enabled on each of them, so the attempts are blocked, and I’ve already changed all my passwords. However, this tells me that whoever obtained the mSecure database has been able to decrypt it and does have access to passwords! Very upsetting. We were blatantly lied to about mSecure’s security measures. MSecure’s users are owed the truth about exactly what this “unauthorized person” has obtained.

Every day without a scope statement is a day the 'willful or grossly negligent' argument gets easier to make — and under certain state protections, that's 3x damages plus $750 per head, with the 72-hour clock turning on whether Account Key material was in that database. Telling us what was taken now is cheaper than explaining the silence later.

 How is this proof that your vault was decrypted?  If some random other entity was trying to change your passwords and failed because they don't have your current passwords, would that appear different in any way?  Are these the only 4 passwords in your vault or are there others that aren't being attacked?  Do you suppose that out of all mSecure users yours is the only vault decrypted?  Not saying you vault wasn't cracked, but it does seem that there could be other potential causes for what you're observing.  As one example,  you don't by any chance have an AI agent installed on your computer do you?

You are right, I have no way to prove that the mSecure database breach is responsible for this. In answer to your questions:

- No, I do not use an AI agent (wouldn't even know how to set one up) and don't have AI running anywhere on any of my devices.
- Yes, to date these are the only four accounts where I've been made aware of attempts to get into them because of multiple 2-factor authentication requests showing up within a few hours of each other via text and email while I was out of the house with my family and not anywhere near a computer (so, wasn't me or anyone else in my household requesting them).
- No, I can't imagine that mine would be the only vault someone would want to break into.

All that said, the coincidence is certainly eyebrow raising. (I haven't used the Facebook and Instagram accounts in years - not a fan of social media.) Even if the attempted account break-ins had nothing to do with the mSecure breach, my trust in mSecure is gone. My family and I have now switched over to a different, third-party security audited password management app and requested a pro-rated refund from mSecure. We are still waiting to hear back from them on that request.

Cheers.

@Sarah I tried to share some tips with you, but the mSeven team obviously didn’t like it, so they scrubbed my post, which is why I’m about to write some very negative reviews on various public review and media sites. Sorry.

Accedi o Iscrivitiper pubblicare un commento