Discord account hacked

[WHAM]

Having had a close call with this type of attack a while ago, and knowing it's likely too little too late, here's what small advice I can give to people as a way to try and avoid falling victim to this kind of thing:

If you are ever requested to download and install something or to follow a link that seems even the slightest bit shady, despite coming from a seemingly trustworthy source, try to confirm via a second channel of communication that the request is genuine.

For example, if a link is sent via discord, try to verify it through email or via a PM here on the forums if possible. It adds a bit of extra security, as the attacker must have breached more than one account to convince you at that point.

As always, though, more security means less convenience. That's what makes it so easy to fall victim to these kinds of attacks, as we all crave a bit of convenience and dislike the hassle.


As for my experience with this:

Spoiler

An old friend of mine messaged me out of the blue on Discord, asking me to do a favour. His 'friend' had 'worked so hard' on developing a game and nobody was playing it, so I was sent a link to download and try it out and maybe leave a review. In my case the attack was crude and the 'game' the link sent me to was a Chinese knock-off MMORPG that I bounced off enough that I didn't download anything and called my friend out, only later realising I'd barely avoided a mess just by being picky with what I'd download based on the images on the website that acted as the source of the dangerous files.

[close]

Be safe out there, folks!

[Kastchey]

Looks like Honza's Discord account might have got hacked, everyone please be wary of any DMs from him.

[Honza]

It's true, both my Discord and Itch accounts are currently hacked (happened through a link I got from Kastchey's hacked account). Losing Discord history hurts, but the Itch one is the bigger disaster, hope I manage to retreive it - got all my games, access to revenue, etc. there. The fact that the hacked account is still active after *months* is baffling   

[Kastchey]

Months and multiple support requests with Discord, mind you. They're useless.

My most recent request to them that hasn't been fed to the bots yet is to delete my old account, as all attempts to recover it so far have failed. I fully expect them to decline on the basis that I don't have access to it or the email currently associated with it (duh), but we will see.

[eri0o]

@Honza have you reported somewhere to itch Io support?

[Honza]

Yes, with several updates (they've since deleted two of my games, replaced the other two with malware and changed my name to Kastchey's). Nothing but one automated response so far.

Seems I got my Discord back though - shocked by that after Kastchey's experience, they responded and let me reset my password

[eri0o]

@Honza try reaching out directly to Leafo (https://leafo.itch.io/) or some other itch dev to see if it works faster.

[Honza]

Thanks, DMd him on Twitter about an hour or two ago, no response so far. Has anyone communicated with him before? He might not be getting messages from people he doesn't follow.

[eri0o]

I had mailed him when I posted and he mailed me back with "Thanks for notifying me, we'll follow up with the account owner.", so hopefully he will get in touch with you.

[Kastchey]

You're a star, eri0o. They did reply and Honza got his account back.

[Honza]

I had mailed him when I posted and he mailed me back with "Thanks for notifying me, we'll follow up with the account owner.", so hopefully he will get in touch with you.

Awesome, thank you so much! I got the account back.