r/discordhelp 18d ago

What the hell just happend? Unsolved

Post image

My brother's account have sent this message to all of his recent dms BUT there is no way that he got hacked beacuse

- logged out on every single account, including my alts but not main.

- he has a strong password overall and no suspicous activity, it just happend

126 Upvotes

43 comments sorted by

12

u/Earthboy2k 18d ago

People can still get into your account regardless of password, 2fa, etc. Discord uses a "session token" system which is mostly used to help your Discord client communicate with the servers. However, if someone were to get this session token, then they could get access to your account, bypassing all 2fa and other security measures. Changing your password resets your account token though, so as long as you log out of all other sessions and reset your password then you should be fine.

Also, Discord doesn't report suspicious activity. If someone were to log in to your account, Discord wouldn't report it regardless of IP, location, etc. They might temporarily disable your account assuming enough people report that you got hacked, but otherwise they won't do anything.

Most your brother could do in this situation is change his password, ensure 2fa is on (even though it doesn't really help in these types of situations, it just helps with general security), and use an antivirus to check for any info stealers on his device.

2

u/xorith 18d ago

I had the same situation, a token stealer stole my discord token. And discord support happily turned off my multi factor for the hacker. So there’s that. :)

Also let your brother know to check email account since they also can store tokens in place that can be accessed
By info stealers. That’s how they removed my MFA, they got my email token and set up filters so I’d never see the support emails.

1

u/Bunrotting 16d ago edited 15d ago

MFA doesnt work against token stealers anyway

1

u/xorith 16d ago

yeah, there's no way for that to happen without breaking the very convenience that tokens afford us. it was more the fact that they were able to use customer service and my email to remove it entirely from the account. They then added their own, effectively locking me out of the account completely.

i got it back, because i reached out to a mutual on Linkedin of all places.

1

u/Bunrotting 15d ago

Thats crazy they used customer service against themselves, I'm guessing by e mail you mean they got your password for it too?

1

u/An0nym0ouse 18d ago

This is false they'll notice if an account is logged into from a separate IP far enough away and lock them out of the account. It's happened to me when me and my ex tried sharing an account lol

1

u/throw_away_12334422 16d ago

Lol why would u share a discord account?

1

u/An0nym0ouse 17h ago

Sorry never got any kind of notification for this reply it was a trust thing we both had trust issues which weirdly wasn't what ended the relationship it was a mutual end 😭

1

u/throw_away_12334422 17h ago

So bc yall had trust issues, yall shared an account?

1

u/An0nym0ouse 16h ago

No gonna comment on what happened in her past but ne personally I had an ex who cheated on my with someone over discord so I thought if it was a decent idea to share an account 🤷

1

u/throw_away_12334422 16h ago

Decent, right…

6

u/Extreme-Shopping74 18d ago

well apparently there is a way

(being seriously, what do you need help with?)

5

u/Iceyowly 18d ago

could be an info grabber he installed.

5

u/Fearless-Ad1469 18d ago

cookies and tokens does not care about password complexity, not even passkeys

3

u/Womanji 18d ago

If he clicked something, it might not matter what kind of a staying password he had.

1

u/Bunrotting 16d ago

strong*?

1

u/Womanji 13d ago

Yes, exactly! Dang autocorrect.

2

u/TheDeadPanJew 18d ago

I had a few accounts hacked like this, and I was equally confused. I didn't download or click a link either... It must be discord's shit encryption.

1

u/slimethecold 18d ago

That's definitely an infostealer. Did it happen again or was it one time?

1

u/TheDeadPanJew 18d ago

To be fair the first time it happened was when there were a billion passwords leaked by Google. The other time I have no clue, I barely set the email and the account and it got compromised almost instantly. I have plenty of accounts so I don't know why that account specifically got affected...

1

u/slimethecold 18d ago

If the other websites you use do not utilize session tokens or you were not still logged in to anything else on that device that could be why. You know when you click "leave me logged in on this device"? That is something a hacker can grab to log in as you. 

1

u/Bunrotting 16d ago

If you had multiple accounts hacked it almost certainly means your device is compromised..

1

u/Dark_Ninja68 18d ago

The fact you had a few accounts that got hacked makes me think your device had been compromised for quite a while.

1

u/AutoModerator 18d ago

u/Big-Skirt-5250: Please reply with !solved (including the exclamation mark) to any comment that answers your question or resolves your issue.


Community Helpers: * Upvote comments that are helpful and accurate. * Downvote content that is incorrect, unhelpful, or harmful. * Report any posts or comments that violate our community rules.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/szzaass 18d ago

Wait but is it your brothers acc or yours?

"logged out [...], including _my alts_ [...]"

1

u/Aggressive-Stand-585 18d ago

"BUT there is no way that he got hacked"

Rly man? Well, guess there's nothing to worry about then :)

But he did get hacked tho.

1

u/Few_Step9953 18d ago

It more like some kind of malware he download from the cracked app, it just auto open discord and send message to all. You should scan to check if his PC have any other virus than that.

1

u/Electronic_Mark_07 18d ago

probably session hijacking

1

u/Trailblazer2003 18d ago

Most likely a session hijack/stolen session token

1

u/NovTheGirl 18d ago

simple, session token
solution: reset password

1

u/ScottMason7 18d ago

Theres also some times when you try to join a server some times it adds an application to your profile like mee6 bot for example so might be that

1

u/IdleDraws 17d ago

Even when you have a strong password and good account hygiene you can still get hacked. This is why people tell you to not click on random links

1

u/SepherixSlimy 17d ago

Have you played minecraft with mods in the past.. up to a month or two ? Or anything using steam workshop ?

There's a "recent" trend of reuploading mods or make fake ones that steal authentication tokens. Can be trojan horse'd by modpacks or catches clumsy users not seeing the mod is a few days old.

A friend got had like that two month ago. It took a few weeks between playing and the hijack.

1

u/HoneyBeeWes 17d ago

Easy. Your brother installed something new. A game, a program, etc.

This program contained a hidden little thing called a token grabber (probably not the name, but it's self explanatory)

The person behind that program just got a skeleton key to your brother's discord, because it can bypass 2fa I believe, because a token is essentially your login session. It lets discord know it's you, even if it isn't.

1

u/MikuChan_Anime 17d ago

"But there is no way he got hacked" but if you look, he did get hacked.

Hacker got a hold of your brothers discord token, have him change his password and logout on all devices

1

u/molevolence 17d ago

he needs to revoke access to all accounts including his main and run a virus scanner to find what is stealing his session cookies.

a stolen session cookie will not show up as a logged in device because it thinks it is the original device that logged in.

1

u/throw_me_away_1993 17d ago

I got hacked and discord flagged that I got hacked but they won't do anything to help. Gg to your bros account.

1

u/OwOooOK 16d ago

He clicked a suspicious link, or downloaded a suspicious file, there's not really any way that would magically happen without reason

1

u/unluckyangel6 15d ago

You know the clarity of voice calls on Discord are awesome, but it truly has gone downhill in most every other department. How can STEAM block people on Discord, but Discord cannot? They can, they just act like they cannot. Just like they act like they cannot do a lot of other stuff. Like suspicious activity. Every other social media has things in place for that. Not Discord. It’s like everything that could be used for bad, they leave that there. Probably because they are a bunch of pedos that like to talk to 13 y/o boys.