[Garrett Morrell]

Hi folks,

Following

(i) theft of approximately $1200,
(ii) a voluminous string of 1000s of identical or similar phishing emails,
(iii) unauthorized call forwarding to a designated number associated with spam,
(iv) inability to turn off call forwarding to specified number,
(v) delayed receipt of texts/calls (showing hours to days after submission),
(vi) hundreds of daily robocalls,
(vii) and a sophisticated email demanding a large sum to avoid disclosure of sensitive information purportedly collected from my device through spyware and a key-logger—which the hacker sought to prove by relaying my various passwords, contacts, website traffic, etc.,

I have executed a complete security wipe of my BlackBerry Z10, encrypted all personal data and files, set up a highly secure SSL/TLS, changed all login credentials using a secure device and third-party platform, enabled two-factor authentication, disabled unauthorized call forwarding through my ISP, and filed detailed complaints (with email headers), among other remedial things.

Should I be concerned about a malicious executable surviving the security wipe?

[conite]

Should I be concerned about a malicious executable surviving the security wipe?

Nope.

Nor do I believe you had a malicious executable in the first place.

[Ben xfg]

Nope.

Nor do I believe you had a malicious executable in the first place.

How could they tell him what his password was then?

[conite]

How could they tell him what his password was then?

It wasn't his device password.

"the hacker sought to prove by relaying my various passwords, contacts, website traffic, etc.,"

[Ben xfg]

It wasn't his device password.

"the hacker sought to prove by relaying my various passwords, contacts, website traffic, etc.,"

So where did the hacker obtain his passwords?

[conite]

So where did the hacker obtain his passwords?

Probably his browser - most likely on his desktop.

[howarmat]

So where did the hacker obtain his passwords?

Because this data is out there for almost the entire population of earth.

[Ben xfg]

Because this data is out there for almost the entire population of earth.

Care to elaborate?

[PantherBlitz]

How could they tell him what his password was then?

They found his info from any one of numerous data breaches that have been all too common these days. They are using that info as "proof" that they have sensitive material on him in an attempt to extort money.

[thurask]

Care to elaborate?

https://haveibeenpwned.com

[co4nd]

Care to elaborate?

All the services you use on your phone and the information your service provider has on you is stored on servers in various corporate datacenters. Hack the server and they get your information no matter how secure your phone is.