This ad doesn't have any photos.
|
I still have no idea precisely what occurred, but my cookie hijacking made sense in terms of what I was able to see on the access logs – the same browser cookie for auth that I'd used several months prior, but no subsequent new login attempt, no MFA hacks etc.
Facebook share YouTube's problem – there is no MFA challenge when you update something significant about your account, such as your display name. It would be wise to do so upon making significant profile modifications, but they don't.
Apart from that, logging in to Facebook today I noticed I had a notification regarding my second profile – which was my hijacked one but the browser still knew (the account wasn't been deleted, just completely blocked/disabled by Facebook). I'd like to mention here as well that I didn't get any email or other notification,
How do I recover my Facebook after it’s been hacked?
|