So you receive an invitation to try out a new game! This usually comes from a Discord request either from a stranger or a friend, though you might see it through email, SMS, or similar. The person invites you to play a game they’re developing to review/test it. In fact, because you’re so helpful, they might offer a month of Nitro, or money, or both.

You download the file - you might have to unpack it as it’s a .rar file - and run it. You may be able to play something, but usually the “game” immediately quits - and on top of that, you are no longer logged into Discord. You try to log in again, but shortly after, you no longer have control. Your account is gone.

And that’s not the only thing that’s happened. Along with your Discord information - which they can use to get new victims posing as you - they now have access to all the passwords you’ve stored in your browser.

How to protect yourself
Never ever download an executable from a random Discord link - or anywhere else, for that matter. These scammers rely upon greed and curiosity to get your account and your passwords stolen. Some versions of this use the lumma infostealer, some use other executables, but they all do some form of the same - steal your info, and usually your Discord account.

(If for some reason you do fall to this, change all your passwords on a different device - don’t do it on the infected one! And then do a clean install of your operating system. Also, please work with Discord to get your account back.)