Cybersecurity on Facebook Ads

Hi everyone!

I have two questions in regards the cybersecurity when it comes to Facebook Ads.

I'm managing Facebook Ads campaigns for several campaigns and today in one ad account there was a new traffic campaign made in Indian language with a large budget.
Obviously, someone had gotten access to the ad account.

We called the bank and froze the credit card. We'll request a chargeback.

My first question is - What steps can be taken in regards to this incident to find the hacker/restore the funds or at least to prove to the customer that it wasn't me who stole his money?

My second question is - In the context of working with customers' ad accounts to which both I and the customer have access, what's the best thing to do in terms of security.

Most of my customers don't have the necessary knowledge to protect themselves on the internet (they use weak and repeated passwords all the time, use bad e-mail service providers which have a history of being hacked and leaked several times).

I'm 99% sure that they got access through the customer, not via me because the ad accounts of my other customers are untouched.

What can I do in the future as a precautious measure to prevent such incidents from happening in the future as this is damaging my business?

Use authenticator/2fa for your ads and mail accounts.

I find running a combo of Bitwarden + Authy is the safe bet.

Bitwarden is a free reputable open-source project, which can not only store your passwords securely but has a pass generator with a self-destruct encrypted notes feature. For all client's accounts that I manage, I change the pass for something like that qSY6ZtxAP&dX4N and send the encrypted note to the client.

Google Authenticator once fucked me over, because It stores all the data on the one device. So I broke my phone's screen and wasn't able to log in to any of my accounts. Authy on the other hand is multiplatform and can sync between devices, even PC.

Hope this will help

Maxim Fadeyev said:

I find running a combo of Bitwarden + Authy is the safe bet.

Bitwarden is a free reputable open-source project, which can not only store your passwords securely but has a pass generator with a self-destruct encrypted notes feature. For all client's accounts that I manage, I change the pass for something like that qSY6ZtxAP&dX4N and send the encrypted note to the client.

Google Authenticator once fucked me over, because It stores all the data on the one device. So I broke my phone's screen and wasn't able to log in to any of my accounts. Authy on the other hand is multiplatform and can sync between devices, even PC.

Hope this will help

Click to expand...

With the recent cyber breaches, is it not possible for hackers to get into Bitwarden? LastPass data was breached some years ago. No online application is safe.

Rollfic said:

With the recent cyber breaches, is it not possible for hackers to get into Bitwarden? LastPass data was breached some years ago. No online application is safe.

Click to expand...

Anything could get hacked, it is just a matter of reputation and trust in the project. As the matter of fact, a big chunk of last pass users moved to Bitwarden after the data breach and the subscription price increase in 2019-2020.

Besides, it does the work for me and offers premium features for free. What more could you wish for?

Anything is better than having all of your passwords stored in chrome