I recently found out that both my Steam and Discord accounts got hacked. I've already changed my passwords and ran scans with Malwarebytes and Windows Defender, but I want to know what else I should do? I'm also trying to figure out what went wrong. I only use Steam to download games on this PC and avoid anything unofficial. Plus, I didn't have my firewall turned on, I didn't click any sketchy links promising free stuff, and I had 2FA enabled on Steam. Where could I have inadvertently left myself open?
2 Answers
Honestly, my bet is that you clicked on a link in a Discord chat or even in a game chat at some point. It's super common for people to get tricked that way!
Have you ever reused passwords between services? If both your Steam and Discord accounts had the same password, that might be a vulnerability. Always create unique, strong passwords for each account, and enable 2FA wherever possible. Also, make sure your recovery options like phone numbers and email addresses are up to date. It’s a good idea to check for any active sessions on devices you don’t recognize too!
That's a solid point. I used a pretty weak password for Discord, so I bet that was the chink in my armor.

It's funny how assumptions work! I appreciate the guess, but could you suggest steps I should take now that this has happened? I’m looking for actual fixes, not just guesses.