Cyber Crime Assistance
Account recovery and FIR support after a social-media takeover
A hijacked social account used for extortion was recovered and the evidence package handed to the cyber-crime cell.
Client
Individual client
Duration
9 days
9 days
To full recovery
1
FIR filed with evidence
0
Money paid to attacker
The challenge
The client lost access to a long-standing social media account. The attacker changed recovery details and began demanding money from contacts.
What we did
- Timeline reconstruction from login alerts and device history
- Evidence capture of extortion messages with hashes and timestamps
- Platform escalation via verified recovery channels
Key findings
High
Account had no two-factor authentication and reused a breached password.
Medium
Recovery email itself was compromised earlier and unnoticed.
Remediation
- Recovery email secured first, then account regained through platform escalation
- Hardware-backed 2FA and fresh unique credentials configured
- Structured evidence bundle prepared for the FIR submission