3 ms·
You might've been fished with a fake site to provide the gh password while the attacker didn't expect that you have 2fa enabled. Alternatively, a badchrome exte
by gostsamo 4y ago
You might've been fished with a fake site to provide the gh password while the attacker didn't expect that you have 2fa enabled. Alternatively, a badchrome extension, but it would've stolen much more like session cookies and the like. I'm not sure about 1password dashlane, but, and the rest.
What is your thread model? Who would like to hack you and what access would they gain? Act according to that.
- jFriedensreich 4y agoThank you! I dont think fishing is plausible, as i always manually re-enter websites if a password is required, i never use links in emails. Also i am not highly exposed i dont think a targeted attack is likely. I disabled some browser extension now, thats also a good possiblity.
- gostsamo 4y agoIf you don't know the vector of attack, maybe it would be good to reset everything and blow the whistle if you are in any organization which could be affected. Also, check moving to a hardware key if you are not already. Good luck!