It finally happened, 10 years of unrestricted internet access :)
An old friend DMed me on Discord asking me to test a game they ''made''. The images were stolen from some itch.io game and I only found out after. I instantly realized upon launching it when I saw this.
To be fair, it did feel off...
Not long after, my Discord began seeming sort of... off. I instantly went to some GCs I was in warning people in case it stole my account.
# What it did
It instantly unfriended everyone, and left every GC + Server, including ones I cannot get back (unfortunately). Some people noticed this instantly, and DMed me until they were blocked by the same script being ran (this was on my browser, by the way). And began trying to talk to me again, as you can see here, no matter how many times I unblocked them it instantly reblocked.
A random account (which I don't believe I'll mention for my own safety and in case I'm not allowed to) which joined in 2017 began DMing me. I pretty much instantly knew this was the hacker, and began wasting their time with stupid questions while I took images of all my emails and some other important stuff.
I went on my laptop and instantly began changing the password to every email. They hadn't yet stolen or compromised them thankfully. Every email was saved, well, except for one, and it wasn't stolen, I just forgot the address but I'll figure it out later.
They obviously weren't aware I was doing this as they continued to bluff about selling my information on the "dark-web". While they did have data, 2FA is already on everything I had, and anything important had its password changed.
# Info about the initial incident
If your friend DMs you to ask you to test a game for them, just don't do it lol. I was tired and hungry, not thinking that straight and they took advantage of it.
# My personal advice
1. Reverse image search the images they show you!
- If I did this, I would have seen it was all stolen from a 3 year old itch game.
2. Remember how your "friend" acts
- This friend lost his Discord account twice in 2022 due to falling for Steam scams.
3. Use OneDrive (despite how much I hate it.) and backup your email(s) first.
- Without your emails being accessible, they can't really do much to steal your info. OneDrive helps restoring data if you have to wipe your PC (like I sadly did.)
4. You aren't invincible
- Do not praise yourself as invincible to scams, they always evolve, and can get you at any moment. My ego and full trust in someone I hadn't talked to since 2022 blinded me from the truth.
5. Do NOT pay them money. Waste their time as much as possible.