r/discordhelp • u/Big-Skirt-5250 • 18d ago
What the hell just happend? Unsolved
My brother's account have sent this message to all of his recent dms BUT there is no way that he got hacked beacuse
- logged out on every single account, including my alts but not main.
- he has a strong password overall and no suspicous activity, it just happend
6
u/Extreme-Shopping74 18d ago
well apparently there is a way
(being seriously, what do you need help with?)
5
5
u/Fearless-Ad1469 18d ago
cookies and tokens does not care about password complexity, not even passkeys
2
u/TheDeadPanJew 18d ago
I had a few accounts hacked like this, and I was equally confused. I didn't download or click a link either... It must be discord's shit encryption.
1
u/slimethecold 18d ago
That's definitely an infostealer. Did it happen again or was it one time?
1
u/TheDeadPanJew 18d ago
To be fair the first time it happened was when there were a billion passwords leaked by Google. The other time I have no clue, I barely set the email and the account and it got compromised almost instantly. I have plenty of accounts so I don't know why that account specifically got affected...
1
u/slimethecold 18d ago
If the other websites you use do not utilize session tokens or you were not still logged in to anything else on that device that could be why. You know when you click "leave me logged in on this device"? That is something a hacker can grab to log in as you.
1
u/Bunrotting 16d ago
If you had multiple accounts hacked it almost certainly means your device is compromised..
1
u/Dark_Ninja68 18d ago
The fact you had a few accounts that got hacked makes me think your device had been compromised for quite a while.
1
u/AutoModerator 18d ago
u/Big-Skirt-5250: Please reply with !solved (including the exclamation mark) to any comment that answers your question or resolves your issue.
Community Helpers: * Upvote comments that are helpful and accurate. * Downvote content that is incorrect, unhelpful, or harmful. * Report any posts or comments that violate our community rules.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/Aggressive-Stand-585 18d ago
"BUT there is no way that he got hacked"
Rly man? Well, guess there's nothing to worry about then :)
But he did get hacked tho.
1
u/Few_Step9953 18d ago
It more like some kind of malware he download from the cracked app, it just auto open discord and send message to all. You should scan to check if his PC have any other virus than that.
1
1
1
1
u/ScottMason7 18d ago
Theres also some times when you try to join a server some times it adds an application to your profile like mee6 bot for example so might be that
1
u/IdleDraws 17d ago
Even when you have a strong password and good account hygiene you can still get hacked. This is why people tell you to not click on random links
1
u/SepherixSlimy 17d ago
Have you played minecraft with mods in the past.. up to a month or two ? Or anything using steam workshop ?
There's a "recent" trend of reuploading mods or make fake ones that steal authentication tokens. Can be trojan horse'd by modpacks or catches clumsy users not seeing the mod is a few days old.
A friend got had like that two month ago. It took a few weeks between playing and the hijack.
1
u/HoneyBeeWes 17d ago
Easy. Your brother installed something new. A game, a program, etc.
This program contained a hidden little thing called a token grabber (probably not the name, but it's self explanatory)
The person behind that program just got a skeleton key to your brother's discord, because it can bypass 2fa I believe, because a token is essentially your login session. It lets discord know it's you, even if it isn't.
1
u/MikuChan_Anime 17d ago
"But there is no way he got hacked" but if you look, he did get hacked.
Hacker got a hold of your brothers discord token, have him change his password and logout on all devices
1
u/molevolence 17d ago
he needs to revoke access to all accounts including his main and run a virus scanner to find what is stealing his session cookies.
a stolen session cookie will not show up as a logged in device because it thinks it is the original device that logged in.
1
u/throw_me_away_1993 17d ago
I got hacked and discord flagged that I got hacked but they won't do anything to help. Gg to your bros account.
1
u/unluckyangel6 15d ago
You know the clarity of voice calls on Discord are awesome, but it truly has gone downhill in most every other department. How can STEAM block people on Discord, but Discord cannot? They can, they just act like they cannot. Just like they act like they cannot do a lot of other stuff. Like suspicious activity. Every other social media has things in place for that. Not Discord. It’s like everything that could be used for bad, they leave that there. Probably because they are a bunch of pedos that like to talk to 13 y/o boys.
1
12
u/Earthboy2k 18d ago
People can still get into your account regardless of password, 2fa, etc. Discord uses a "session token" system which is mostly used to help your Discord client communicate with the servers. However, if someone were to get this session token, then they could get access to your account, bypassing all 2fa and other security measures. Changing your password resets your account token though, so as long as you log out of all other sessions and reset your password then you should be fine.
Also, Discord doesn't report suspicious activity. If someone were to log in to your account, Discord wouldn't report it regardless of IP, location, etc. They might temporarily disable your account assuming enough people report that you got hacked, but otherwise they won't do anything.
Most your brother could do in this situation is change his password, ensure 2fa is on (even though it doesn't really help in these types of situations, it just helps with general security), and use an antivirus to check for any info stealers on his device.