A Morning Coffee, a Discord DM and a compromised PC

PC got compromised

Just like any normal morning, I was sipping coffee, checking emails, and scrolling through my X feed when a Discord notification popped up.

A DM from my friend.

He was sending me screenshots of posts claiming that clicking some random link would send free USDT directly to your account.

That immediately raised some red flags. Why?

First, he doesn’t even use crypto.

Second, the exact same message was being sent from his account into every Discord server channel we were both in.

Third, he knows better than anyone that free money doesn’t exist.

So it was obvious that his pc got compromised.

This Can Happen to Anyone

If this happens to someone who barely uses the internet, it's understandable. But he is someone who knows tech, has spent years online, and still became a victim of this attack.

It didn't happen because he lacked knowledge.

It happened because of carelessness and that's exactly why these attacks work.

Windows Security Taking the Win

Back in the early days of Windows, its built-in security wasn’t good enough. Most people — myself included — used third-party antivirus software on their work machines.

Nowadays, Windows Security has become surprisingly good at immediately detecting suspicious behavior, showing warnings, and stopping or flagging software and processes that appear malicious.

And in this case, it actually did its job.

What Actually Happened

When I told him that his account was sending spam, he started piecing things together.

He had been downloading some software. During the installation process, a redirect happened and a fake installer was silently downloaded in the background. He was multitasking and didn’t notice.

Windows Security actually flagged it and stopped the installer, but he simply closed his laptop and went to sleep, assuming everything was fine.

Obviously, it wasn’t.

By the next morning, his Microsoft account, Discord, Steam, EA account, Instagram, Claude, and likely several more accounts had already been compromised.

What I Told Him to Do

1. Reset the laptop.

• Wipe it completely and reinstall Windows from scratch.

• Yes, there’s a very small chance that a sophisticated attacker could infect the BIOS or firmware. But those are generally elite-level threat actors, not the kind running small-scale phishing campaigns.

• A clean OS reinstall is more than enough here.

2. Reset every password.

• Everything.

• Not just the accounts you know were compromised — all of them.

• Use a password manager if you aren’t already. Create unique passwords for every account. Reusing passwords is exactly how one compromised account turns into ten.

3. Inform your contacts.

• Tell your friends, colleagues, and anyone in shared groups that your accounts were compromised.

• Make sure they know not to click any links that came from you.

• My friend was lucky I noticed it early. Not everyone gets that warning.

4. Recover your accounts.

• For accounts you’ve lost access to, use recovery options such as backup emails, phone numbers, or recovery codes.

• Most platforms give you a way back in.

• Go through the official recovery process and avoid panicking.

The Lesson

It’s 2026. At this point, everyone should know this:

If something is being offered for free, you should immediately ask yourself: what’s the catch?

Free USDT. Free gift cards. Free software that suddenly asks for your login.

These aren’t opportunities.

They’re traps.

Browse the internet responsibly. Pay attention to what you’re installing. Develop an instinct for things that feel off, because that feeling is often there for a reason.

Stay safe out there.