Countless Pakistani Discord Accounts Hacked in Dangerous Money Stealing Scam

A dangerous Discord scam using the name of YouTube creator MrBeast is hacking users worldwide, including a large number of people in Pakistan.

While the total number of compromised Pakistani accounts remains unconfirmed, the campaign appears to have targeted thousands, if not many more, based on the widespread reports circulating online and across local Discord communities.

I personally have witnessed numerous of my contacts lose access to their Discord accounts after they were hijacked by the malware behind the scam. In one particularly severe case, a compromised account was used to delete an entire Discord server. The server had to be rebuilt from scratch, with all messages, media, and other content permanently lost.

Although the scam often appears as a fake giveaway, the real danger is a stealthy malware infection capable of hijacking Discord accounts without requiring passwords or bypassing login credentials.

What the Scam Looks Like

The attack usually begins when users receive a direct message from a friend’s compromised Discord account. The message typically claims that the recipient has won thousands of dollars in free credits for a gambling or casino website.

The bogus screenshots shared by the compromised account typically include the X account of a popular celebrity, which in this case, is YouTuber MrBeast. The fake account is often promoting a new crypto launch that leads to a scam website with many names.

We will not be sharing the names here for safety purposes. The image below has been censored accordingly.

Users who visit these fake websites are often pressured into paying bogus verification fees, VIP upgrade charges, or taxes before they can supposedly claim their rewards. Victims end up losing money while receiving nothing in return.

Info Stealer Malware

So, how are Discord accounts being compromised to promote this crypto scam? Many victims whose Discord accounts are hijacked never even visit these scam websites.

Instead, their computers are infected with info stealer malware, a type of malicious software designed to quietly collect sensitive information stored inside web browsers. This includes saved passwords, browsing data, and most importantly, authentication cookies.

By stealing these cookies, attackers can impersonate users and access their Discord accounts without entering a password.

Since hackers are using an already authenticated session, Discord’s Two-Factor Authentication (2FA) offers little protection in these cases because the login process is bypassed entirely.

Organized Criminal Operation

The campaign is part of a larger cybercrime ecosystem rather than the work of individual hackers.

Malware developers create and sell info-stealing malware to criminal groups. These groups then distribute the malware through cracked software, pirated applications, game cheats, and other untrusted downloads.

Once victims are infected, the stolen browser cookies and credentials are compiled into massive databases known as stealer logs. These logs are then sold to scammers, who use automated bots to spread the fake MrBeast giveaway messages to even more Discord users.

How to Protect Yourself

Victims often remain infected for weeks or even months before realizing their accounts have been compromised.

To reduce the risk, users should:

• Avoid saving passwords directly in their web browser and instead use a reputable password manager.
• Never download cracked software, pirated applications, game cheats, or files from untrusted sources.
• Use reputable security software capable of detecting malware and unauthorized browser activity.

What to Do if Hacked

If your Discord account starts sending spam messages or shows signs of unauthorized activity, act immediately.

Change all of your passwords from a different, clean device, back up important files, perform a full Windows factory reset to remove any malware from the infected computer, and contact your bank if payment information was stored in your browser.