Oops All Passwords - Malware Coming Soon Near You!

Robert Meylor describes how a free game mod from a reputable-looking Nexus Mods page led to a compromise of his PayPal account. The mod had passed a Windows Defender scan twice, but the original uploader's account had been taken over shortly before he downloaded it, and a malicious version was posted through a newly invited contributor. Meylor explains that browser autofill supplied his login email, and that a passkey on a previously trusted device let the login skip the MFA prompt he expected, so money left his account before he noticed.

He then walks through his response in order: disconnecting the machine, telling his employer's security team, resetting about fifteen years of passwords, and moving to a different password manager. His initial fraud reports to PayPal stalled because the transfers came from his own IP address. The turning point came when his bank treated the overdraft as credit card fraud and pushed the claim through. The police report and a cybercrime hotline offered little direct help.

In closing, Meylor argues that traditional hygiene and reliance on built-in antivirus are no longer enough, and that individuals need a personal disaster-recovery plan. He recommends mapping which accounts are sensitive, understanding how passkeys and trusted devices affect MFA, and knowing in advance how to respond to a compromise.