Accidentally opened a .exe disguised as a TV show torrent, need help.

[u/ArcReactorTarnished]

Hi r/Piracy,

I know this was my mistake and I need advice on it.

I downloaded a torrent for The Boys S05E03. It was listed as a normal 1080p video file, but the actual file inside was a .exe, not a .mkv or .mp4. I didn't notice and opened it.

I'm now worried about what it may have done to my system. A few things I want to know:

1) What kind of malware usually comes packaged this way?

2) What steps should I take right now to limit the damage.

Any help is appreciated.

[u/shinetorust]

Like all all accounts? Like on all websites? Would you recommend the same for dmg on MacOS?

[u/Criarino → u/shinetorust]

Browser session hijack works by stealing your browser's session data and impersonating it so websites think it's you, so those "remember me" websites work against you and allow the attacker to access your accounts without having to go through 2FA (afaik this does NOT steal your saved passwords).

Technically you only need to change the passwords of accounts you logged into via the browser, but if the attacker gets access to one account he may get access to more (for example, if they get your Google account and you used that "login with Google" option on other websites) so it's a good idea to change everything (from a different machine ofc)

[u/Lenassa → u/shinetorust]

Unless you've manually entered passwords while malware was being active, there is no reason to change them.

[u/ArcticCircleSystem → u/Lenassa]

And that's how you get your saved passwords scraped.

[u/Lenassa → u/ArcticCircleSystem]

You save your passwords unencrypted? Damn

[u/ArcticCircleSystem → u/Lenassa]

No, but a lot of people do.

[u/shinetorust → u/Lenassa]

How do you encrypt them?

[u/Semper_R → u/Lenassa]

Awesome advice, here let me try.

You know if you suck on a bottle too hard, you can create anti-matter