I have been attacked by hackers twice in the last ten days. Comodo Internet Security 2025 Pro did not respond at all.
The hackers broke into my laptop and blocked everything.
On the right side of the screen, there was a phone number. I used an old mobile phone to contact the group. The person asked for money to “free up” my account.
I had only two choices: either pay or turn off the computer.
I chose the second option. When I turned on the computer again, it was impossible to restart it.
I used a flash drive with a rescue disk, but all my files and accounts were gone.
I immediately called the police Cyber Security department, and they started an investigation.
I want to ask the specialists from Comodo what the following video recording I made during the hacker attack means.
Where was Comodo to neutralize it?
I have no more questions.
I just want to add:
No one has access to my laptop and never has
I have never opened an email from an unknown sender
I have never used an email ending in @outlook.com except for contacts with my Microsoft account.
I have always updated Windows 10 Pro
I never open folders without checking them with Comodo Security
VPN starts when I turn on my computer
I use a Vodafone SIM card attached to a Wi-Fi Modem
I am familiar with almost all the surprises and protections published in Station X.
Comodo representatives, if they are at all interested in protecting their customers, can use contact to Action Fraud.
To add to the reply by cruelsister, that is all running in the Virtual Desktop so how has it wiped all your files ? Are you saying the infection has jumped across to your full machine ?
The hackers displayed a phone number on my laptop screen, as you can see. I used a different SIM card and spoke to one of the groups, who informed me that I could unlock my machine for a certain fee.
I have reported this case to Scotland Yard and MI-5, and they are currently investigating the perpetrators. However, I have a question: How did the hackers gain access to my laptop, and why is Comodo Security not responding?
I will respond to any requests for additional information regarding this case.
Yes, absolutely.
Besides, I had no chance to continue working on my laptop.
I did the following. I took out the flash drive with the SIM card to stop internet access, pressed Control-Shift-Delete simultaneously to log out of the account - I have four accounts and only one of them is Administrator - I logged into my second account and after a few seconds the same screen appeared.
I closed the account and opened the Admin account.
Same story. The hackers said in advance that if I turned off my computer, all the information on it would disappear and I would not be able to log in again.
That is exactly what happened.
Then I used the so-called risky disk and restarted to make sure that all the information I stored on my computer, including Documents, Photos, Videos, programs, such as Comodo, browsers, etc. were deleted.
That’s strange. I must have been using a different version because when this happened, the internet was working. However, after I reinstalled Comodo, I found out it was not functioning.
Also, I’ve been using Comodo Internet Security for over 10 years and have never had any problems, except with Comodo’s VPN, which is incredibly poorly built.
Since you were probably using an old version, it could be that your external machine was infected.
We have no way of knowing that, but if someone here on the forum who is more experienced can help you, that would be great.
If you have more details about how all this happened, or a more detailed video, that would help, or even a file that infected you, if possible, so that the COMODO team can investigate.
I want to provide more information for the investigation. Still, after the fake Microsoft appeared on the screen and demanded payment, I could not continue working on my laptop.
A friend of mine has a unique tester for such cases, but he was not in London then.
Not sure how it would have escaped containment unless you had the below box ticked and then saved a file to a “Shared Directory” and then ran that file out of virtual desktop.
Remember you need to “Reset Container” to undo changes to the system.
Virtual Desktop doesn’t work anymore because that is Secure Shopping technology which has been discontinued sice 2025 version was announced last year.
CFW doesn’t filter VPN traffic because the Firewall Driver isn’t added to those network adapters like it does for Ethernet and Wifi. This has been a issue for a long time but whatever the case, Comodo’s Containment/Sandbox will still Contain any untrusted, unknown or malicious file no matter where it came from.
I can’t see Comodo running in the video task bar but it is a bit blurry and the UI looks like you were running an old version of Windows. I think we need more information on what exactly happened to determine the cause here.
After all, this is just heresy, what I write about the hacker attack, etc. It looks more like stumbling upon a link from FakeAV - Phishing that was launched in a virtual environment anyway.
