Back in 2018 I thought a free antivirus was enough and it cost me $300

I was using a popular free program and clicked a fake invoice email that looked real, which let a keylogger slip through. It grabbed my PayPal login before I even realized what happened. What's a good second layer of defense you all use now, like a specific password manager or something?

3 comments

3 Comments

wesley_thompson1mo ago

I mean, keyloggers are nasty but idk if a password manager is the magic fix. A free antivirus should have caught that, maybe yours was just out of date. I still use the free version of Malwarebytes for a second scan sometimes and it's fine. Maybe it's just me but I feel like not clicking sketchy emails is still the main thing.

paule531mo ago

My buddy Mark had his bank account drained last year. He was running updated antivirus but still got hit by a keylogger from a fake invoice email. The password manager he switched to after that stopped the autofill on the fake sites, which was the real game changer for him.

diana_black221mo agoTop Commenter

Yeah, the "not clicking sketchy emails" thing is key, but honestly people make mistakes. I read an article about how keyloggers can sometimes hide from scans if they're new enough. A password manager isn't magic, but it helps because even if a keylogger gets your master password, it can't autofill on a fake bank site if the web address is wrong. It adds another step they have to beat. So it's not just about catching the malware, it's about limiting the damage after.