Last night, I noticed that I sent a ton of scam messages related to Mr. Beast to my friends on Discord. Shortly after, I received a password reset request for my Ubisoft account, which freaked me out. I quickly changed the passwords for both my Gmail and Discord accounts, but I still feel like my information might be at risk. I consider myself cautious online, but I'm unsure how this happened. I ran a virus scan on my PC that came back clean and removed anything that might have led to this breach. I haven't really used my phone for anything beyond messaging and videos, so I'm puzzled about how they accessed my Discord without my password. If they do have access, I'm not sure what my next steps should be. Any advice?
5 Answers
First off, definitely enable two-factor authentication (2FA) on all your accounts. It adds an extra layer of security that can really help prevent unauthorized access. Just make sure you choose an authentication method that works for you!
Make sure to set up two-factor authentication everywhere possible and avoid reusing passwords across your accounts. Utilizing a password manager can really help keep things organized and secure!
If you suspect malware, look into cleaning tools and keep your antivirus updated. It’s also wise to check if your computer is showing any unusual behavior—sometimes it's lurking there without you knowing!
This seems more like token or session theft than just a password guess. I'd recommend logging out of all your sessions and enabling 2FA on your accounts. Also, use unique passwords for everything. A password manager could be a lifesaver in keeping your accounts secure.
I experienced a similar situation with my Discord a few months ago. The best move is to set up 2FA for every account you own. If you’ve reused your Discord password anywhere else, change those passwords immediately. Just don't risk it!

I agree! It's super easy to lose track of all your passwords, and a manager makes it so much easier to stay safe.