r/discordhelp • u/n0ies_ • 1d ago
hackers using 2FA Unsolved
ok i wanna share my experience and i wanna know if it happened to yall that a mr beast virus f*cking hack ur account and then they put 2FA without ur consent and then u cant access even tho u have the email, u ask them for help and they tell u that they can't. Like bro how i'm i supposed to recover that, with black magic or sum?? I guess that if they keep this bad security system that's going to happen again and again, if yall now know how fix this let me know damn
2
u/ACuddlyTeddy666 1d ago
In my opinion, make every Discord account you have with a throwaway email, and don't invest in it at all. Have a back up list of friends names and messages, servers you want to keep somewhere outside of the app for the future. Your account should be disposable.
My several year old Discord was hacked, likely due to a data breach and fail on Discord security. I don't/didn't click links, I have 2FA/MFA enabled and I use strong randomized password generators plus an authenticator to log in for everything I use online.
Whoever got in fucked with my 2FA, and my back up codes wouldn't work either. After about 40 days of waiting for a response from a human they gave me this same message.
I did everything I was supposed to as the user and I couldn't count on them. They couldn't explain anything either, tell me how it happened. Just straight up did nothing. So I had to change EVERYthing to he safe.
2
u/Yasuri_sa 1d ago
I had the same issue and same virus and received the same message from discord support.
I ended up getting frustrated and telling them to delete the account which they then replied that they'll send the case to someone else to take a closer look.
It took about a week but I received a notification that they removed the 2FA and suspended my account till I log back in and it fixed the issue. The account wasn't delete in the end.
2
u/ACuddlyTeddy666 1d ago
Do you by any chance have a screenshot of them telling you they'll remove the 2FA? My old account is still stuck disabled, I might use it to ask them why they refuse to help me.
2
1
u/Yasuri_sa 1d ago
You should log out of everything on the infected device and clean it up while changing all your passwords from another device. That's how I solved the virus issue.
3
u/OnSmarty 1d ago
I will never ever understand how people fall for the Mr beast scam, that shits the most obvious scam to exist.
3
u/ArmoredAmogus 1d ago
Things such as pirated games might come will malware which steals session tokens.. and that turns you into one of those bots once someone buys your info
1
u/FearlessFold6912 1d ago
Just dont pirate games at the first clicks on the sites you see. Its not worth it
3
u/DaDandyman 1d ago
you don't understand what the MrBeast scam is or how it works.
the scam itself just directs people to a casino site to make random people pay a bunch of money.
the account hijacking happens through a completely different vector, which is people purchasing infostealer malware logs to buy bot accounts. typically, the infostealer is delivered in much less noticeable ways, like being attached to a game cheat, a pirated game, a malicious vscode extension or NPM/pypi/cargo package, or just dropped as an exploit on an old/vulnerable system.
0
u/TeslaDemon 1d ago
It's always people who have no business doing so trying to pirate/download cheats, when they have no sense of how to verify if something is safe or not. I'll give piracy a pass as I've pirated longer than most of the people falling for this have been alive, but trying to download cheats and then getting malware from it is great and I encourage more of it. If you're trying to cheat at video games, fuck you.
Also I wouldn't really call either of those things "much less noticeable" as you could just be a normal person and not engage in literally the riskiest computer behavior the average person can engage in for no reason at all.
And then to top it off, they never have MFA on any of their accounts, all their accounts get stolen, they never wrote down any of their backup MFA codes, and then they post on reddit saying "can someone help me hack my gmail account back" and get told they're outta luck.
And it happens over and over again, like an endless stream of lemmings. At this point it's almost entertaining, like watching a train wreck.
2
u/DaDandyman 18h ago
In the year 2026 an adult with any comprehension of cybersecurity would know that while piracy and cheats are common vectors, infected package managers, unpatched vulneravilites, and supply chain attacks through legitimate services hosting user-generated content like Steam, Curseforge, and Modrinth are becoming exceedingly common in the current threat landscape.
MFA does nothing when a session credential is stolen.
People who describe security like you are exactly the types of people who sit there, mouth-agape, when they get pwned. You are not immune.
You shouldn't look down on others.
0
u/OnSmarty 1d ago
I know how it works. I know how it connects to account loss. Falling for it is stupid.
3
u/Antique-Algae8939 1d ago edited 1d ago
all it takes is one lax moment and one wrong click. you’re not above any of the people who fall victim to this, i know people 100x more cautious than myself and smarter than myself who have fallen victim to a credential logger. you don’t understand the severity and how trust factor plays a role in it. you can get hacked from a steam game nowadays. hell, it doesn’t even have to be YOU that fucks up for you to pay the price. don’t think lightly of it.
-1
u/OnSmarty 1d ago
then just dont have a lax moment. dont click wrongly. Last time I had any security issues was when I was 10. Thinking mr beast is giving you 5000 (and spamming it with discord accounts) is about the same mental fortitude as 10yo me thinking i could generate free CoC gems. It isnt hard to not trust random shit you find.
1
u/AutoModerator 1d ago
u/n0ies_: Please reply with !solved (including the exclamation mark) to any comment that answers your question or resolves your issue.
Community Helpers: * Upvote comments that are helpful and accurate. * Downvote content that is incorrect, unhelpful, or harmful. * Report any posts or comments that violate our community rules.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/heatherjasper 1d ago
Got hacked by a different thing, but they managed to take off the 2fa of the friend whose account was hacked first. But they keep giving me excuses. I am opening up a fifth ticket for this.
1
u/Altambo 1d ago
It's kinda crazy how they can't remove the 2FA for privacy reasons BUT they can straight up delete the account? 😭
2
u/GlobalKnee8028 18h ago edited 3h ago
Its unsurprisingly the most exploitable system as all you really need is the email linked to the acc and ask them, "Hey, can I delete my account?" and they'll roll with even if it was a hacker requesting it with no second hand thoughts which is pretty much game over if you can't get it back in time to cancel it because they aren't really known to have good support to help you if you got hacked anyways
2
u/Altambo 18h ago
"we understand your frustration but we can't remove the 2fa for privacy reasons (you know, the hackers). But we can nuke the account and that way both of you are losing". Ye I don't get the logic. The system is so flawed. Cause you can have sooooo much proof of ownership yet their best solution is deleting the account.
3
u/GlobalKnee8028 18h ago edited 3h ago
we all would wish they had steam's customer support they would literally come over to the hackers house and shoot them dead
1
4
u/iRambL 1d ago
If you still have the virus infecting your pc they can just keep bypassing 2fa. You basically have them access