My friend’s PC got infected because of some Roblox script (I know, not a great move). All his accounts got hacked—Steam, League of Legends, Outlook, you name it. We’re sorting things out bit by bit.
I told him to change all his passwords from his phone and to reinstall Windows once he finds a USB drive.
Set up MFA (multi-factor authentication) on any accounts that allow it.
Using a password manager helps too—then you won’t end up with the same password on everything, so getting hacked on one account doesn’t lead to all of them.
Learn from his mistake, if possible.
Edit: Also, if you can, go into each account and remove any active sessions. Big sites like Steam, Google, and Microsoft usually have this in security settings.
u/nickey88k also made a good point about checking mail settings. Hackers sometimes set up email forwarding without you knowing, and that could mess up your password recovery.
@Baylen
But if they steal the browser cookies, different passwords won’t matter much. Still, having a password manager and unique passwords is a smart move.
SphereCodersForum5 said: @Baylen
But if they steal the browser cookies, different passwords won’t matter much. Still, having a password manager and unique passwords is a smart move.
Never save passwords in the browser… that’s just basic safety.
Same thing happened to me once… I really need to stop downloading stuff at 4 AM . Here’s what I did: changed all my passwords from another device (like a phone), then went into each account and revoked any active logins I could find. After that, I did a full format and wiped every partition from my drive using a USB Windows installer.
Make sure he doesn’t log back in on the infected PC until it’s completely wiped, or it could happen all over again.
Also, make sure his email doesn’t have any forwarding rules set up. If they are, the hacker could still get his emails.
Enable two-factor authentication (2FA) on each account if it’s not already on, and refresh the codes to be extra safe. Also, check for any weird accounts or apps connected to the hacked accounts.
If it was a stealer virus, have him log out on everything after changing passwords so that the session tokens get reset.
Some stealers can use old tokens to keep access, so be thorough!
I have a friend who copies Roblox scripts without even knowing what they do—he thinks it’s “hacking” . I hope one day he learns a lesson.
Some websites and apps let you see what devices are linked to your account. For Steam, you can contact support to lock your account, change the password, and force all devices to log out.
Honestly, feels like one person can target you with hackers if they hold a grudge or feel jealous. It’s scary but happens… maybe let hackers know there are limits?
Tell him to keep an eye on bank accounts too. Some of this stuff can leak financial info. Enabling two-factor authentication everywhere he can will help add a safety layer. Also, back up any important files before doing a wipe. Good luck!