Was my account hacked?

  • 1
  • Problem
  • Updated 2 years ago
  • Acknowledged
  • (Edited)
Sir, for the 3rd month in a row my limit seems to have skyrocketed before the end of my month. This month is the worst and I am concerned that not only has my account been hacked, but it is going to cost me money as my usage will be over due to the very possible hack. The first month I may have gone over, but I am now concerned that it is more than my usage and it has to be checked out as my account was hacked a few years ago.
Photo of Leon Puissegur

Leon Puissegur

  • 6 Posts
  • 3 Reply Likes

Posted 2 years ago

  • 1
Photo of Exede Lindsey

Exede Lindsey

  • 1827 Posts
  • 163 Reply Likes
Hello Leon, 

This is a public forum; I removed your personal information for your privacy. If your monthly data is being consumed and you believe it’s been hacked I would heavily suggest updating your router password, doing this would block access from others currently on your home network. If you’d like, we can take a look at your account and verify which devices are on your network. Please send us your account and contact info to exedelistens@viasat.com. Thank you
(Edited)
Photo of Gwalk900

Gwalk900, Champion

  • 451 Posts
  • 471 Reply Likes
Hello Leon,

I am going to repost a reply I had made in another thread because it certainly applies in your case:


While I am one of "the other guys",  data loss issues are a problem that anyone on a capped dated service faces.

Its a subject I tend to specialize in "over there" and for the most part the missing data is the result of users not having a complete understand of computers, routers, other devices ... wireless in particular and networking in general.

To that end I am going to repost a reply I made in another topic in the hope of increasing understanding of the subject:


 

Having a router in the mix makes it nearly impossible to pin down the culprit(s).

Lets look at a basic home network:

The above example has GlassWire installed on one of the wired computers and it will measure all of the data used by that computer but we also have to consider all of the other connection avenues that having a Router connected allows

Also to be most effective GlassWire needs to be set up to exclude "local traffic" but more on that later.

We need to take a closer look at the router itself:

The above block diagram shows THREE  potential avenues of use:


A router consists of three potential traffic areas:


#1: Its firmware/hardware:

This would include automatic update checks, Remote Access accounts/vulnerabilities, WPS settings/vulnerabilities and "front end" username/password setup to name a few.


#2: Wired LAN connections and the types of devices connected as well as their settings. Specifically end users not understanding the differences between "hard off", "sleep" and "hibernate" as well as other system settings such as Wake On LAN, Wake On Ring and even extending to "scheduled tasks".

We need not even go into the details of forced updates and data "sharing" inherent to Win10 and being back ported to Win7/8/8.1


#3: We come to the most difficult to control ... Wireless activity

We can start with what encryption level, if any, has been set up. We also need to consider the username and password that limits access to the routers front end so that unauthorized users can add themselves to the wireless users list. It needs to be changed from the default values.

We also have the multitude of settings of the many types of devices that can connect wirelessly be they computers, notebooks, tablets, cell phones or even thermostats.

It is often not apparent when all apps on all devices have had their update ability turned off. Very frequently an update will cause other settings to change to their default values.

Considering the number of "connection avenues" provided by a router it is mandatory that it be excluded during initial troubleshooting steps.


During the troubleshooting phase the "network" MUST be reduced to the minimum number of variables.

It needs to have the router removed from the equation so as to look like this:

The number of variables has been brought down to a manageable level.


It now is time to download and install some software to track usage and identify what program and what process is or has been running and using data.

For this we need Glasswire:

https://www.glasswire.com/ help/

An important point here .....

GlassWire will only monitor the single computer upon which it is installed.

Later as the router is reintroduced, GlassWire will have to be installed on every Windows computer that is connected to the router


Another point to be made here is that if Windows IS the root of the issue ... it uploads/downloads sporadically .. it may take time to "catch it in the act".

So as to not "torque" the amount of usage displayed by GlassWire we need to change a couple of settings ... we don't need to count (later on when more devices are connected) "local" traffic.

Here are my suggested settings:

(click on picture for larger image)


Understanding the results:


Each computer, one by one needs to go through this process.

Once all wired computers have been "cleared" we can add the router back in to the mix with one major exception .... we have to disable the "radio" ...

We then want to test the "network" consisting of all "cleared" wired devices and the router "guts" to ensure they work well together as a whole.

Now comes the stickey part the re-introduction of the routers wireless function.

Its tough because I know of no software that will load on the variety of devices that CAN connect ... cell phone, tablet and so forth.

On laptop computers you can of course load GlassWire but that still leaves many potential avenues open.

The "Poor Mans" method requires great discipline. ALL devices other than a single one have to be and remain in a "hard off" state and that is not easy to do.

Run that single device over time and monitor usage carefully while still running Glasswire and the "difference" is ... the amount used by THAT device.

Of the devices ... Apple stuff is probably the worst ... VERY large updates on a random basis and the updates are very prone to "break" during download causing them to restart from the beginning ... massive data loss there.

It is essential that the router be properly set up !

Guest access MUST be disabled in the routers internal GUI

No "open network" :  

WPA-PSK [TKIP] encryption at the very minimum !

Clear all devices one by one with the understanding that the usage may be sporadic.

There are higher end routers that WILL track usage by individual device but these may be out of reach (about $200) for the casual user. That is the only way to be SURE of what is going through a network.

There are a number of Routers available that with the inclusion of third party firmware will allow a user to track usage by device within the Routers interface.

That would include these Asus Routers:



Leon, the above should give you an overview of data loss issues.
For a more detailed look on how to use Glasswire I would suggest that  you read the details of a topic that was posted on the Hughesnet forum where Old Labs and myself assisted a novice user in finding the source of her "leak".
While not all problems have the same root cause the tools used and the principals are the same:

https://community.myhughesnet.com/hughesnet/topics/3-calls-re-excessive-data-usage-told-yesterday-to...

This reply and the one I linked to are long but .... taken one step at a time will provide you with a procedure that will assist you in finding the cause of your data usage.
Photo of Gwalk900

Gwalk900, Champion

  • 451 Posts
  • 471 Reply Likes
In addition, I would highly recommend that you get a router that allows you to track usage by device.
This is from my Asus RT AC3100
Photo of Old Labs (VS1-329)

Old Labs (VS1-329)

  • 3803 Posts
  • 3844 Reply Likes
If nothing else, seriously consider GWalk's methodical process since it will allow you to verify the accuracy of the usage meter (or not as the case may be but rarely in my experience).

And don't forget a second line of defense for your anti-virus if you read his last link above. 
(Edited)
Photo of Leon Puissegur

Leon Puissegur

  • 6 Posts
  • 3 Reply Likes

I downloaded the glasswire and like what it does.  I will be using it to check my usage now.  I did have a lot of family over using my network over the holidays so I will wait for the next month to see if the usage drops. Thanks for all the help.