I'm a little apprehensive that there is some unauthorized usage of my router or computer or phone. I have an Asus RT-AC66U, a macbook pro and an iPhone. I'm hoping someone here might be able to help.
I got a phone call from a "no caller id" a couple of weeks ago from some clearly scammers trying to get me to go to fastsupport.com and do something or other, I didn't, but I stayed on the phone with them for 10 minutes leading them on. A week or so later I got an email from Apple saying I needed to change my Apple ID password and security questions so I did, and then I needed to select my device from a list, and there was a device listed called "Neftali Lira's iPhone", definitely not mine but I thought it might have created a randomly generated option to ensure I picked the right device. Another week later I got overage notices from my ISP because I had used about 100gb more than normal this month. Sensing something was afoul I logged into iCloud and realized Neftali Lira's phone was still listed under my devices on find my iphone. I removed the device from my account, reset my phone to factory and restored my computer to a time machine backup from 3 months ago. Changed all my passwords, reset the router, changed its password. The next morning I got a phone call from a "no caller id", no one on the other end, so I hung up. I logged into my router to monitor traffic and noticed that 4.5gb had been downloaded and uploaded when I was not using the internet and the activity stopped the exact minute I got the phone call. Either very coincidental or very suspicious.
I did some research at this point, fastsupport.com is clearly a phishing scam, but I never downloaded anything from their website, only talked to them on the phone, I might have visited the website on my phone out of curiosity, I remember what it looks like but I can't remember from which device I looked at it, can they get into my devices from just a phone call or me visiting the site? My router, RT-AC66U has some old firmware that I was using and from what I've read I think was vulnerable, I was running: 188.8.131.52.374., I've just now updated to 184.108.40.206.380 and changed the passwords again. I don't know anything about this type of security stuff, does any of that seem suspect to anyone? Is it possible they got access to my data? Am I safe now? Thanks in advance for any help.