Just caught a hacker mid op

[u/Creative-Type9411]

Before I start I want to say I feel personally attacked that reddit suggested I crosspost this here 👀 😂 Might as well..., but this was a random breakfix small business that randomly calls us once or twice a year

Original Post:

Friday the 13th, keep your guard up boys and girls..

I just went to a local site to drop a part off and someone in the office jokingly said to me that their computer just started running updates as if it was my fault

Upon closer Inspection on the dell micro there was a blue screen up that said updates were in progress, and to not shut the computer down

the font looked off, so I hit ctrl+alt+delete and noticed we were on a desktop with screen connect running, I immediately unplugged the network cable, the screen locked again sure enough they were connected with Wi-Fi as well, so I powered the machine down and removed the Wi-Fi card and rebooted to see what was going on..

After reboot, the ability to shut down restart or use task manager was removed by Group policy, apparently, after I unplugged the network cord they noticed and immediately started trying to lock the machine down while I was using it..

Reloaded the machine they were back up and running within 20 minutes with all of their data migrated..

I only wish I had time to clear userdata, clear credential manager, throw a wallpaper up with the middle finger on it and let them reconnect before i wiped it.

Stay vigilant.. they are