Last week I whined about a script injector trashing my online store and other sites (I have a total of 15 between the shop, my family, and friends). The script injector took advantage of a weak spot in the Wordpress code I had on one of the sites. But the biggest problem was my uncle and the browser hijacker he had on his computer.
I texted him, told him what I found on his account on the shop computer (and that most likely he had it on his home computer too) and told him to stop signing into bank accounts, our online store backend where he fills orders that come in, and any of his real estate stuff. Told him to run a virus scan and Malwarebytes and tell me if anything came up (he knows how to do both).
I thought he read and paid attention to the texts, but that was stupid of me. He does this all the time. He reads it when he feels like it, and if he’s having one of his I-can’t-face-the-world-so-I’m-gonna-lay-in-bed-for-3-days-straight things, he won’t read anything. He also doesn’t read them once he feels better.
But if HE has stuff in between that he wants to talk about, he’ll respond, so the convo about his client’s house being sold and $150,000 of the client’s money sitting in one of our accounts that was discussed within minutes of me sending the “you have a hijacker,” well yeah he WANTED to talk about that so he responded, but ignored the hijacker thing.
So he’s been banking, doing his real estate stuff, and logging into the online store with his home computer. All while we have his client’s $150,000 sitting in one of our bank accounts.
Two days ago I found out he hadn’t paid any attention to my texts about the hijacker that day, so I freaked the fuck out thinking the info had been sent to some random hacker and they were gonna drain the $150,000 account and fuck with all the others. We have EVERYTHING in these accounts.
If somebody got a hold of it, they would have control of all our money/accounts, all our business accounts (my family and I all own our own businesses and between us we run 5 businesses), both our houses, three clients’ houses (my uncle is in real estate), and our credit ratings (there are four of us involved total).
So I was ready to take him and my mom down to the bank to freeze the money (we’re all signers in case something happens to one or more of us) and all the accounts.
That was Monday, and the banks were closed, so I drove over to my uncle’s house to see what I could do with his computer. Thankfully he didn’t have the hijacker on his home computer, so we all breathed a sigh of relief.
But then later that day I started working on my websites again, going into the backend through FTP, and ALL 15 sites were again full of malicious scripts and other shit again. I was SO confused! I had changed all the passwords, informed our hosting service, and had cleaned EVERYTHING and rebuilt our entire online store again (yeah that didn’t take long).
Well it turns out he also had messed with his wife’s laptop, which he never does! Marissa isn’t a techie, so she’s super cautious and never goes anywhere even remotely dangerous, rarely uses tech anyway. I’ve never had to fix anything of hers other than hardware failure. But she called me and said her laptop browser looked funny, so I went over and sure enough the same hijacker on my uncle’s side of the shop computer was on her laptop.
I asked him about it and yup, he’d been using her laptop because the laptop is in the same room with some shipping supplies at his house, and he didn’t feel like walking upstairs to his own computer.
So now I have to rebuild/clean up all 15 websites again, including our online store.
Does anybody wanna adopt a few family members from me?! I’ll actually pay you to take them, and they’re hard workers, they’re just stubborn and ridiculous and prone to drama. If you put them on a leash and don’t listen to their whining, they’ll work hard for you.
Please take my family.