Giving screen access to an unknown Indian guy from the internet is the second oldest trick in the book. It’s right next to giving a Nigerian prince money so he can pay the taxes on his gold.

You mentioned enabling api access, if you did this and exposed your api key to them through the screenshare, that's the equivalent of loging in on their computer and granting them access to your account.

Rob gets taken more than the closest parking spot at a Wal-Mart.

I’m a smart guy. I shared my screen with an Indian fellow whom I don’t know 😂😂

Lol Rob. Wtf? How did you not see those 100ft tall red flags? Someone wanting to mess with FB account settings to do a podcast...come on.

Today, Mr. Spaghetti tells us that impastas took his meatballs.

I will tell you how to prevent this from happening again if you send me $5,000😂

Rob got hacked by the booty bots 😔

You probably leaked your API key to the account. An API key can give them accesss to everything to do with your account without needing a login. Probably has nothing to do with live events it just was a cover up to have you leak your API key.

I still remember one time I got a phone call from an Indian or African guy claiming it was an emergency and he needed money ASAP, he claimed he was a guy I do business with and it was an emergency. The best part was the guy he was impersonating was sitting next to me. 😂

Mr. Spaghetti smelled money coming his way and threw all precautions out of the window. Money is one hell of a drug

Please unblock your fire exit. For your safety!

I'm guessing they recorded their own screen or took a screenshot of their screen when you viewed the API details on your screen, an API is another way to interact with your account without a username and password, my guess is you accidentally displayed the API details and that's how they got in

As stated below, enabling API access is what let them in. API stands for Application Programming Interface and it's quite simply a piece of technology that allows two different systems to talk to each other.

8:59 You just keep waiting there pal, get in line I’m busy getting scammed by other hackers first!😂

First sign of getting old? Not knowing how those darned dang hackers hacked you. Heads up Rob, if a Nigerian prince needs money, it’s not really a prince. Lol

The Wheeler Dealers Facebook account got highjacked too. Mike Brewer is still having a hard time getting it back.The crooks are putting pornography on the short stories on it now. That's messed up.

I always tell my wife if someone emails you and ask for a response don’t reply through that email, Google the company and contact them directly! Good luck with that issue Rob. Cheers Pat 🇦🇺

Hey Rob, please do a follow up on this and include Jellysmack guys in it and maybe get them to sponsor it? Would be good to hear what they do!

The amount of facebook accounts I follow that get hacked is amazing. They wipe the entire account then start posting really bizarre videos that go viral instantly.

Session cookies, happened to a bunch of other youtubers too. LTT was quite famous.

the link that you pasted from the email that facebook sent you was a custom link made for your account, and you showed him the account specific characters when you pasted it into the logged-in tab

These people have no shame. This channel is an institution. Screw them

*Today, Mr. Spaghetti tells us about how he exposed his API key to a random indian guy on the internet via screenshare and tells us the tales and woes of why this is a bad idea.*

Possibly, when you gave access to your PC and mentioned that the screen went black, at that moment the person copied the cookies from your internet browser. By copying the cookies, they only need to paste them into their browser and automatically gain access to everything you're logged into on your PC.

Don’t feel too bad. The top scam baiter KZfaq fell for the same thing.

I like that "Nuclear Option". I would love to see this as an option to deal with scammers

Rob, if he was able to see your pages API Key, you basically gave them a key to the backdoor of the account. This key is usually used to integrate with other applications. The scammer can then send text requests to facebook to modify and gain control of your account with this key. Never give or show an API Key to anyone, it’s more secret than your password as it does not require 2fa

Screen share though, really? Dont do that...

This is why I don’t check my email 😂

First line: who the hell actually calls himself “Timmy” except someone 8,000 miles away who thinks grown Americans commonly call themselves Timmy?

You are the largest scammed person I know besides my grandmother, in which you are tied. You do your own safeguards, but still fail as they are dated. First thing when you got the email, reach out to the company/YT. Problem solved. That is how I don't fall for scams, and at this point I have fun pranking them.

‘Other smart people’ the ego on this guy

You need a cyber guy Rob? Glad to hear you got your account back.

Today Mr. Spaghetti shows us why you should never buy meatballs from Dollar Tree.

We've recently noticed that something similar happens in team viewer where the presenter by default shares their clip board with users in the meeting. I assume something similar happens here in teams, that the moment you copied your link, he managed to access your clip board on his end and use whatever api key was in there.

Its either the API key he was able to see, or if you had share clipboard enabled in zoom. If you can look at account logs you can see how they did it.

Thank you for letting us know! I am not this Rob's neighbor either.

This happened to Millennial Farmer. They caught on to it while it was happening. They some how got theirs back.

I have been hearing a lot of radio hosts talking about this scam. getting emails saying they will pay $5-$10K to be on their shows.. NEVER click links in emails unless you know who it is from and are expecting it

So my question is how did you get Facebook to do anything about this? I had a Facebook account that I had had since the very beginning of Facebook and about a year ago it was stolen/hacked by a I can only assume Chinese scammer as the profile name was changed to a Chinese name and my access was locked out. I had contacted Facebook for weeks on end to no luck to getting my account back even when as far as contacting an attorney to see what they can do and to this day I still do not have access to my original Facebook account. How in the hell did you get Facebook to do anything about it?!?!

My American legion post almost got scammed similarly. They used a state post commanders email just not using one letter at the end of the @. So they asked for gift cards for members and they almost got them

I’m starting to think something is off you don’t stop getting scammed 🐴

Rob should rename the channel Burnt Pasta. The misadventures of Mr. Spaghetti. Something seems to happen to him every week and there very little speeding going on here unless it’s speeding to the next personal disaster.

Start of the video : I’m a smart guy 4 minutes into the video : not true

5,000 meatballs to talk for an hour, not a bad meal at all.

Spearphishing is different than phishing. People aren't prepared for a world of spearphishing

Yup, never screen share with anyone unless you've met them in real life.

Is this a reupload? Feel like I’ve seen this before?

When you shared that one thing and then went back to it.

How much did they offer you to participate in the podcast? 😅

You should watch the videos by Jim Brown. These scams are sophisticated, but he is able to hack the hackers. Fascinating exposes of trashy criminals who take rob people. These people have zero remorse when caught. These operations are huge.

The good news is that you appear to be relatively unscathed by it, so your valuable lesson wasn't also a costly one. Perhaps it's because I'm an executive recruiter and am always seeking out info on people that I might deal with. It's second nature for me to highlight someone's name and do a right-click Google search before I ever speak with them. I did that for your guy, Timmy, with and without 'New Heights' in the search string. The lack of results alone were a red flag. But if I still engaged in a legitimate Zoom or phone call and that guy also asked to share my screen with him _AND_ spoke with an Indian (Hindi) accent, that's not just a very strong warning, that's a sledgehammer over the head and a flashing neon sign that says "SCAMMER ALERT".

I would never share my facebook with anyone period. I hope i dont fall for that myself thanks for sharing info

Pretty sure when you cut/pasted the URL from your email he was able to use that same URL to gain access because he was able to see it in the screenshare.

LMAO "Ahh, this is how it goes."

Jelly smack!? What

...the lack of self awareness is impressive...

Blinded by the light dude. Happens to the best of us

Fb blows for absolutely everything. No support

WOW what a story.... ;-( I hope you can get back hold of your Facebook account or Business account... Yeah I hoped you can get access back ASAP.. I will share this Video...

Prolly just a screen grab of the link and a quick image to text conversion on any decent smartphone

From what I gather, the last thing you did was enabled API access, then he left. You were sharing your screen during this process and its possible the API key (sensitive) was displayed after enabling the API. He got what he wanted at that point and disconnected.

They used the API and saw your key when you screen shared. As for why…. I bet they used it to scam others for the 3 days they had control since your account has enough subscribers to make their scam seem very real to the intended victims. You were just a means to a larger pool of fish.

Thx for sharing.

What’s the update on the S5

I stopped using Facebook because of a long list of reasons from ethics, to them allowing scammers take control of accounts, and customer service give zero shits about providing the ability to recover it, consistently. I know many people who have been screwed by Facebook not caring. Business or personal.

New Heights Doesn't pay for its guest, its all friends and family on their show

There is literally so many Channels out there showing how ppl get scammed and Rob hasnt seen them or doesn't watch them ???

Spaghetti really showing his age on this one

I can almost guarantee it's the the fact you gave API access, it probably printed the access token for the API somewhere and they took a screenshot of it. Love events was probably just a smoke screen to make it seem legit. Regards, a software architect, DevOps Engineer and security researcher.

what happened to your vpn sponsors

I know it sounds bad but stereotypes are a thing for a reason. Most of those scams come from that part of the world for a reason.

Well it seems there are more scams on the internet than legit stuff

First email, why would you refer to Rob as "super speeder"? That's a huge red flag. Anyone genuinely interested in inviting him would start with Rob....

turn on 2 step authentication

Same scam happened to the wranglerstar channel lol

This happen to Wanglerstar about a month back as well

Screen share with Indian guy showing your Api key. What's next sending western union or gift cards?

In this episode, Rob gets robbed. Again.

Rob _The Jinx_ Ferretti

Who in world follows along doing what someone they're talking to for the very first time tells them to do while watching their screen in 2024?!? Prob stole some session token or used the fb API

Do not give random people API access… YOU gave access. look up what that means. Should have an idea what you are doing… saw money and let the red flags fly at every step for pennies….

it was you pasting the link in the window, screen share does not enable them to control anything, when you did the cut and paste they were watching that screen and just copied the link and when in your account through that while you were in there too. facebook should only ley 1 login at a time it does not. this is how it happened.

Freealikoca his channel got hacked

They correctly guessed that Rob's P Dubya is Spaghetti69

Yeah they made you leak your own api key making it so they could control your account without any credentials. Good old session hijacking techniques.

Don’t screen share with people you don’t personally know; they probably hijacked it because it’s all they could recover, if they would have got more they would have taken it; I’d say you got lucky. Be safe.

Timmy Benson ….. they never get the American names correct they’re always off 😂

You went wrong by replying to that email… on a serious note, you gave them access to your computer by allowing them to control your computer, there’s a back door through that where they can do things, without you seeing it on the screen

I wish you would have live-streamed yourself waiting for the zoom call

Kinda wild ya believed so much. Wtf? Like hold up, pull up fb this and that and the other dude wtf. Honestly. This isnt the norm. IM SURE IT ISNT. Like im no youtuber or whatever but wtf. Even i.. can see this as a scam

absolutely stunted on by TIMMY BENSON

Same thing happened to Wranglerstar and he got his account back. Good luck

i dont think it was the live event thing. i think it was that link facebook emailed you to click on that gave them information. or you showed your api key on the key somewhere. they will harvest your contacts, people that follow your page. they can send links from your account saying things like "click on this link to see behind the scenes", " you won click here", " i created a nother facebook acct for ______ please join". etc.. it will have come from a legit source... YOUR OFFICIAL FACEBOOK, that will pass most peoples scam filter and they will click. YES!! facebook should have a nuke button. creative safeguards against take overs like that. im not sure how you could defend against some of these hacks though.

That's phishing with a ph instead of an f

it was the API key

in this episode, Bobby hairplugs shows us his lack of common sense

make sure you use a randomized passwords and a good username and 2FA

not ferreti trying to turn $100-$1000 lul