BreachPublished 16 Jun 2026

Guys I installed a malicious app yesterday and found out that my system is hacked

Source Reddit Cybersecurity

Discussion

A user reported installing a malicious application disguised as a James Bond 007 game from a fake site, resulting in multiple account compromises including Microsoft and Steam accounts. The attacker changed the victim's personal information and gained unauthorized access despite Google 2FA blocking some attempts. The incident was shared on Reddit's cybersecurity subreddit with minimal technical details and no known exploit or patch information.

r/cybersecurity (opens in a new tab)u/AnonymousChad_210 points0 comments

I can see this dude changing my name n phone to his email

And has changed phone number too

Google 2FA didn't let him but microsoft account and steam was hacked I don't even know how many more accounts got hacked

It was a fake James bond 007 game setup I installed from a fake fitgirl site (I messed up pls don't judge)

Is there a way to report this dude and somehow get back my microsoft account

His mail id :- josephinehill2016@alhagustan.com

I couldn't attach a picture can someone help

Impact

The impact includes unauthorized account access, personal data manipulation, and potential loss of control over multiple online services. The breach compromises user privacy and security but does not provide evidence of broader systemic vulnerabilities or exploits beyond this individual case.

Defensive guidance

Users should avoid installing applications from untrusted or unofficial sources. For compromised accounts, victims should follow the respective service providers' account recovery and security procedures, including reporting unauthorized access. Enabling multi-factor authentication remains a critical defense, though it may not prevent all account compromises if attackers use other vectors.

Summary

This report describes a breach incident where a user installed a malicious app from an untrusted source, leading to unauthorized access to several online accounts. The attacker altered personal details such as name, phone number, and email linked to the victim's accounts. Although Google 2FA prevented some access, other accounts like Microsoft and Steam were compromised. The report lacks technical specifics, exploit details, or vendor advisories, and is based on a single Reddit post with minimal discussion.

References

reddit.com/r/cybersecurity/comments/1u7hm26/guys_i_installed_a_malicious_app_yesterday_and/ (opens in a new tab)

Community reviews

Loading reviews…

Discussion

AI analysisMachine-generated, updated 16 Jun 2026, 16:00 UTC

Technical details

References

Community reviews

Related threats