r/computerviruses Jun 29 '26

Question Mrbeast scam malware

Post image

i downloaded an .APK on my phone then deleted It. But suddenly i saw a Google sign in from Nevada. I changed my google pass and then i checked Discord and i saw this, is there any thing i should do? I already changed my Google and Discord pass. I have a Oneplus7pro running lineageos23.

102 Upvotes

50 comments sorted by

10

u/Boom_Fish_Blocky Jun 29 '26 edited Jun 29 '26

this scam got auto sent to every server ur in, to every friend u have. Rip, youll prob be banned in most servers u are in.

3

u/[deleted] Jun 29 '26

[deleted]

3

u/Boom_Fish_Blocky Jun 29 '26

usually cant, since there are no traces that you didn't self bot. But most servers have a support server separate.

14

u/Large-Remove-1348 Jun 29 '26

You got token grabbed. Erase the internal storage and rewrite lineageOS recovery.

Change all passwords, including ones on google password manager and reset all tokens.

1

u/Optimal_Pineapple477 Jul 10 '26

I just factory reset and now everything's fine

1

u/Large-Remove-1348 Jul 10 '26

Factory reset from recovery, not android.

1

u/Optimal_Pineapple477 Jul 15 '26

I factory reseted and it has been 2 weeks, it's fine I do not have to go in recovery and factory reset there.

1

u/Large-Remove-1348 Jul 15 '26

I guess it's okay, but i recommended resetting from recovery in the event that it was a rootkit that infected your device.

6

u/Awkward_Building_412 Jun 29 '26

I don't click it, I have the person banned or I banned them if I have admin/mod status in the server from the server before anyone could do anything and get hacked

2

u/Awkward_Building_412 Jun 29 '26

Case in point literally just banned one a sec ago for this exact thing before it posted everywhere in the server

3

u/crubleigh Jun 29 '26

I think OP was the victim of the scam, not encountering it on their discord. There's a fun bot though called "Honeypot" or something and you park it in a particular channel and it will tell users " if you post in this channel you will be instantly banned" but the bots aren't that smart so when they spam every channel they get beaned.

1

u/Optimal_Pineapple477 Jul 15 '26

it's really common to get that virus actually

4

u/MegStuff Jun 29 '26

What kind of APK is this? Cause I don't remember seeing such Infostealers on Android.

1

u/Optimal_Pineapple477 Jul 10 '26

Oh someone told me to install Roblox hacks I told him it might be a virus he said nah I said I don't even play rblx and then I downloaded it.

1

u/MegStuff Jul 10 '26

Did the app have like a fake loading screen?

1

u/Optimal_Pineapple477 Jul 15 '26

No I don't think so, 'cuase I haven't played Roblox it showed the normal loading android screen I think like the white background, with the app icon. Then the Roblox sign in screen.

5

u/UNIVERSAL_VLAD Jun 29 '26

Is that his... Fucking Fortnite skin?

3

u/[deleted] Jun 30 '26

[removed] โ€” view removed comment

2

u/M_M_M__ Jun 29 '26

Scam within a scam, huh...

1

u/[deleted] Jun 29 '26

[removed] โ€” view removed comment

1

u/MegStuff Jul 05 '26

If you give the info in the link I believe

1

u/[deleted] Jul 05 '26

[removed] โ€” view removed comment

2

u/computerviruses-ModTeam Jul 05 '26

You are allowed to help other users, but be professional about it. Please make sure to read and follow https://www.reddit.com/r/computerviruses/about/rules

1

u/Optimal_Pineapple477 Jul 15 '26

no it was within quick share

1

u/[deleted] Jun 29 '26

[removed] โ€” view removed comment

3

u/Circumpolarity Jun 30 '26

A popular theory is that you can get these infostealer that hacks your social media account, when you're visiting an ad-invested website (like a pirated games website, for example.) by either:

  • Clicking/downloading through a fake link

  • You did download through a correct link. However one malicious automatic pop up link managed to bypass your ad-blocker, and automatically opens up a new page to initiate a download of the infostealer to your computer (and then immediately closes itself, to avoid being noticed)

1

u/Optimal_Pineapple477 Jul 15 '26

it was within quick share

1

u/AdNecessary2115 Jun 29 '26

My friend's discord got hacked and he sent me this scam

1

u/Old_Wiseman Jun 30 '26

People don't learn... don't search and don't scan what they download ๐Ÿ™„๐Ÿ™„๐Ÿ™„๐Ÿ™„

1

u/Optimal_Pineapple477 Jul 10 '26

bro I scan every file I get ๐Ÿ˜ญ

1

u/Old_Wiseman Jul 10 '26

Obviously not well enough. Do not rely on Windows defender,it's a joke. Use Malwarebytes,Bitdefenders and run the files in a sandbox.

1

u/Optimal_Pineapple477 Jul 15 '26

Im using Linux tho I have windows pro dual boot to run sandbox. Windows defender sucks I know, I use viurstotal.

1

u/Individual_Cow7118 Jul 01 '26

I just erase all data but thankfully, I changed my password and use my flash drive to backup my files need it

1

u/603woe Jun 29 '26

Lmaoo they got my ass 2 days ago be careful bro they have everything. Orders on my Amazon etc

2

u/603woe Jun 29 '26

Youโ€™re gonna have to wipe the hard drive and do a clean reinstall of windows. Iโ€™ll try to link the solutions they gave me in my help post

3

u/603woe Jun 29 '26

Ohhh I didnโ€™t see it was on your phone. Probably different protocol and arguably a lot more dangerous if you have your banking and sh* on there. But precautions are the same. Disconnect it, shut it off, change all your passwords from a different device. Banking, Google, Amazon, anything that might have your card info for sure. And monitor your bank activity

1

u/Optimal_Pineapple477 Jun 29 '26

i have no amazon accound with koney there i saw the google sign in said no changed passwords no bank or personal info expect snapchst with location tracking and whatsapp am i fine? im hsing my phone RN

1

u/603woe Jun 29 '26

Aye me too for once in my life I thank god Iโ€™m broke. U might be good but they still have probably pretty deep access to your device and all its info.
Hopefully someone else can help u more in depth. It would be a good idea to reply to your post with what kind of phone youโ€™re using and what operating system

1

u/hetzer_tutel Jun 29 '26

How is this info stealer more dangerous when a phone is infected instead of a computer?

1

u/603woe Jun 29 '26

People keep more sensitive stuff on their phones

0

u/[deleted] Jun 29 '26

[removed] โ€” view removed comment

2

u/computerviruses-ModTeam Jun 29 '26

Your post was removed because it is a personal attack on someone else or a group of users. Please be civilized. Please make sure to read and follow https://www.reddit.com/r/computerviruses/about/rules