A friend was hacked. How to understand anything?

Question

Information Security

They tried to enter VK and Instagram, as well as debit money from a bank card (we had all the data). There are no IPs. VK and Insta are tied to different mail. Explain how this could happen?

Answer 1

There is a type of people to whom the saying corresponds, until a fried rooster pecks in the ass, it does not itch. It was the fried rooster. Once upon a time I worked as an enikey worker on call. The client gritted that VK was not working, there was a business tied to him, so it was critical. I check it works. I ask him how he understood that it does not work? He opens the browser, enters Yandex search in it, drives in "vk" there and opens the first link from the list. Fairy tale bastard. The first link was an advertisement. The site turned out to be phishing, looked like VK but was located on a different domain.
If someone did not understand, this person himself gave the login and password, and the evil pinocchio himself. And I just rejoiced at the resourcefulness of the guys who came up with this scheme and was surprised at the then stupidity of Yandex.

Answer 2

Trojan (virus).