A Cautionary Tale: How I Fell Victim to a “Test My Game” Scam and What You Can Do to Protect Yourself

As a long-time gamer and member of various online communities, I thought I was savvy enough to spot a scam when I saw one. Unfortunately, I was recently lured in by the classic “Test my game” scam—a reminder that cybercriminals are always finding new ways to exploit unsuspecting users. Here’s my experience and the steps I took to mitigate the damage, as well as advice on how you can protect yourself.

How the Scam Unfolded

I received messages from two old Discord accounts—familiar names that I had known for years. Against my better judgment, I engaged with them and was sent a link to download a so-called “game” for testing purposes. I admit it: I was caught off guard by the nostalgia and trust I had built over the years. Long story short, I executed the file, and shortly afterward, I was contacted by a separate Discord account that provided a screenshot of my Google account logged in. The realization hit me hard—I had been hacked.

Taking Immediate Action

Upon recognizing the breach, I sprang into action. Fortunately, I had a spare notebook, so I disconnected my main PC from the internet. I promptly logged out of my Google and Discord accounts on all devices. My next move? Resetting my passwords. Thankfully, most of my passwords were saved in Google, making this a straightforward process. I also enabled two-factor authentication (2FA) wherever possible to add an extra layer of security.

On my infected PC, I performed a clean installation of Windows 11. While this only wiped the OS drive, I wanted to ensure that I scanned for any hidden malware. I ran a thorough scan using Windows Defender and planned to follow up with additional scans using Avast and Malwarebytes. For the time being, my PC remained isolated from the network.

Seeking Further Guidance

I know that addressing the immediate threat is crucial, but I needed to determine if additional steps were necessary. If you’re curious, the malware I encountered can potentially be checked at oblivora dot com for detailed analysis.

Ideally, I’d prefer not to wipe all my drives; however, if that’s the only option left, what tools would you recommend for a complete wipe?

Ensuring My Accounts Are Safe

Looking back, I took proactive measures in an effort to secure my accounts, but I want to