iPhone problems

[dombanks]

Can anyone help? 

I am having no end of issues with my Facebook account getting hacked. It’s 2-3 notifications a day where it’s saying it’s been logged into by somewhere in America  often via a password reset and Facebook has locked the account. So nothing more weird is happening with anything.

 

i have reset the password to some petty odd things that are well over 16 characters. 

I got a bit worried so I scanned the pc I use and there was nothing and I’ve only used this phone. So today I’ve not used anything other than this phone and I get 2 locked account notifications from FB. 

 

I was was suspicious of the phone the other day so looked for a virus/malware etc but it seems iPhones can’t get viruses or malware. 

 

Anyone know now how to scan the phone for one ... most of scanners are for photos or watching the incoming WiFi ... nothing seems to be a good old fashioned scan for malware? How do it do it

[Quinten]

Apps on iOS are 'sandboxed', what means that one app can not access or see other apps.  You could still have a malicious app on your phone, but you would have installed it yourself, and acknowledged that you wanted to install it.

 

Are these notifications that you receive emails or actual iPhone notifications?  Have you looked in the Facebook account settings for logged in sessions and which apps have access to your details?  There's a plethora of settings that can be used for Facebook

[Blatman]

Lets start with the dumb questions first...

You sure they genuine notices from Facebook? They could be phishing. When you get a notification that the account is locked, have you actually tried to log in to the account?

Have you replied using the embedded links in these notifications? If so, that's how you are being "hacked". The links are likely not genuine. But I'm speculating at this point...

 

[dombanks]

Cheers guys

 

yes 100% sure legit as I logged into face book on my pc. It’s my work laptop so I got the it dudes to make sure it was ok. Hence I suspect the phone. Generally if any email asks me to log into anything I will go to the web page myself and don’t follow an email link. Also the email just informs you of suspicious behaviour. It’s a setting you can turn on. I would use the app on the phone rather than my work pc anyway. 

 

I install very little tbh. Mostly stuff you would trust... google maps, amazon, the rail card app. Is there a way to check? 

Just in case I have re-installed farcebook.

 

facebook does put a notification that the account is blocked on the phone screen. But there is no link I just go to the app.

 

The only other thing I could think of is the email account was compromised so technically someone could request a password change and access the security code they send so I’ve changed that also. There was an old Hotmail account I don’t use that was still registered with Fb (now deleted) 

 

I guess lets see? It’s been ok since last night when I changed stuff (famous last words) 

 

[Blatman]

I'm not following. You say that "Facebook" have said the account is locked but you logged in using your work PC?

Re-installing Facebook won't do anything. Most of the time re-installing deleted apps restores them to the last installed settings. 

How do you know for 100% sure the email comes from Facebook? Have you examined the message headers?

What URL do you see if you hover over any of the links in the email?

 

[dombanks]

Face book inform you of suspicious log in attempts. you opt into this in your Facebook settings. this is done via email and via the app sending a notification to your screen in the same way it would if someone responds to your post etc. If they think the log in is suspicious they lock the account. you then go though a process to reactivate the account where you can review recent activity, I got an phone notification but used my pc to go through the reactivation process to log back in.  

no idea how to examine headers but you if you hover over the links its a https://www.facebook.com/.... link. anyway i dont follow links in emails i usually go to the website directly or open the app directly as i dont trust email. 

 

ive trawled though the emails an i think it was my email account with virgin that was compromised as one of the log in attempts was via a password reset code and the email address. since the weekend when i got a mo, i changed the email address i use with FB (and the email password t) and its been ok (touch wood). 

 

.