(help, constant hacking.) How to stop my WiFi devices / aimesh being knocked off and connecting to fake ones?

[Zakalwe]

Title.
RT-AX86U and Rt-BE92U

Within 5 minutes it'll happen and credentials are added, windows doesn't see it as a virus or anything it gives elevated permissions and I've no idea how to defend against it. It happens even if I use mobile phone tethering for Internet.

Have wiped my drives and installed windows 20 times, tried other distros and they get into those too somehow but I don't know enough about Linux to figure that one out.

 

[Zakalwe]

I took some crappy videos of them getting in and showing as much info as I can with process explorer until they crashed my system.

Here:

Here:

I turned folder protection on for my whole drives you can see what they're trying to run etc:

 

[Viktor Jaep]

Not even sure what you have going on, but blurry photos and shaky cam vids really do not help prove any point whatsoever.

Focus only on your router. That's what these forums are for. Produce actual logs, evidence of nefarious activities, and actual screenshots of what the problem actually is. Not taking a pic of your laptop screen of your wifi settings.

If your laptop or other devices on your network are compromised with malware, get that clean first. Format everything from scratch and install with original ISOs. Use patch management best practices across all your devices and install anti malware tools.

Everything you're describing just seems highly unlikely. But if you can actually provide some solid evidence, we can help give you some suggestions on what to do.

 

[Zakalwe]

It isn't mal ware. It is rid hijacking via mitm WiFi with same said/Mac to trick connection to it first I lost access to many accounts and spent ages recovering them.

 

[ColinTaylor]

What is it exactly that is the problem? The credentials in post #1 are a normal part of the Windows operating system. That same goes for the processes shown in your videos (as far as I can see). I didn't examine all of the blocked applications in your last video but most of the ones I saw I recognised as legitimate software.

 

[Zakalwe]

It's a difficult thing to show when windows thinks it's a normal activity. I have had entire accounts stolen and my 1PASSWORD account through this and had to send ID to various companions to get it back. They are also harassing me in other ways than my computer which is pointless to go in to now. I just need help with this.

I have reported them to the action fraud UK people a couple of weeks ago and filed 2 police harassment reports and I'm waiting for them to get back to me.

I recently (this morning) tried to setup tailscale on my router and devices and realized they had access to my phone somehow and disabled the tail lock using the keys shown on screen. I've switched to another phone and will only be using data on it to avoid any mal ware deployment via WiFi on it. It's also at full stock and bootloader locked.

The ping back on the phones was giving an error - tailscale told me it's either a weird setup or I have been compromised. I filled them in and I'm waiting for a response and hopefully they can give me some more evidence to go with the 4gb of event manager logs and payload files I have saved on two drives.

 

[Zakalwe]

What is it exactly that is the problem? The credentials in post #1 are a normal part of the Windows operating system. That same goes for the processes shown in your videos (as far as I can see). I didn't examine all of the blocked applications in your last video but most of the ones I saw I recognised as legitimate software.

Those are being 'activated' 5 minutes after booting or less, I am on a clean install now with 0 net connection and none of those are popping up.

I know it's next door because the other houses around me have lived there 50 years no problem until they showed up.

The fake ssids also have a strong connection to me whereas usually it's low because the main router is downstairs.

They enjoy knocking my aimesh'd BT off the network constantly so I can't stream anything from my server downstairs via plex. It's a huge headache. How do you stop that from happening?

PS. I'm pretty sure that my younger brother is in cahoots with them. He goes into my room and loads the hack shirt on my laptop if I'm out of the room for 5minutes. The bios password feature is useless I've found when you can find key gens for the code it gives you on 3 unsuccessful attempts. I've resorted to carrying it everywhere with me.

 

[ColinTaylor]

Those are being 'activated' 5 minutes after booting or less, I am on a clean install now with 0 net connection and none of those are popping up.

Sorry, what do you mean by "Those"? What exactly are you referring to?

 

[Viktor Jaep]

I just can't even...