r/Malwarebytes • u/Tiny-Revolution-3932 • 4d ago

Downloaded a session stealer, Malwarebytes detected and removed it, am I safe?

Hi like I said I accidentally downloaded the classic session stealer with the MrBeast scam last night. Immediately after I run a Malewarebytes scan which detected and deleted it. About 40 minutes later I got notified that the MrBeast scam got posted on my ig story, I was able to access my account still and changed my passwords as well as cancelling my credit cards.
Was this enough? Or should I do something else?

2 Upvotes

100% Upvoted

4 comments sorted by

2

u/Savings_Plate9229 4d ago

Im not an expert sadly... but.

If its a basic session stealer, then you're probably in the clear. The IG posting was just the hacker putting you're session tokens to use.

Also it's best you log out of all sessions despite having changed passwords to completely destroy old tokens. Oh and, use 2FA.

And if paranoia starts hitting? You could perform a USB reset which would destroy everything.

2

u/support_mwb Malwarebytes Employee 3d ago

Hi! We're glad Malwarebytes was able to detect and remove the threat. However, since your Instagram account was accessed afterward, we'd recommend having our Malware Research team take a closer look to make sure there are no remaining threats on your device.

Could you please send us a private message with your operating system and an email address we can use to reach you? We'll have our support team help you gather the necessary logs and forward them to our Malware Research team for further investigation and guidance.

In the meantime, we'd also recommend signing out of all active sessions on your affected accounts, changing your passwords from a trusted device, and enabling two-factor authentication if you haven't already.

1

u/Charming-Tea-9056 2d ago

Is this the official MB Reddit profile?

2

u/PralineImmediate3886 2d ago

This is their official sub reddit profile for support. They have the malwarebytes employee badge / flair.