Discord trolls also use token loggers. I got caught this way (even with 2FA enabled for discord). Without going in to a lot of detail I can tell you that I was blackmailed, reported it to discord, who then returned with the response that I was the one blackmailing and suspended *my* account! This person had gained access to my browser settings too, so no doubt it looked like me doing the trolling after my accounts were compromised. I got my discord account recovered and reinstated, but what a hassle. (btw I never use my real phone number but when that blackmailer was showing me my real details, I was scared for sure.. but then when he got to my phone number, I knew exactly which website account was compromised first - after discord, of course. Maybe tmi here, but added so you can see I panicked for a good reason, rather than the time limited threat I also got.)
Yes, you can get your accounts back, but what a nightmare it is, esp if you have live financial accounts (cc's for example) attached to any online accounts. Hard lesson learned! I have Steam Guard, but I also have removed the my browsers' password saving options, I log out of every account as soon as I'm done and everything has at least 2FA now. The hope is that if it's now difficult for me, the account owner, to log in to every single site I use, then it's a nightmare (and hopefully near impossible) for anyone else to do so. I changed passwords repeatedly to have 24 or more characters over a couple of weeks, and then it dawned on me that my entire pc was prob not secure (ie that every password change was logged). After a scan with malwarebytes I was horrified to discover SIX trojans that windows defender let slip by. I also changed to a better firewall. Now I'm not trying to make anyone as paranoid as I now am, just raise awareness in online security. These trolls dont care that it also affects your real life and I hope that none of you have to ever go thru what I've recently dealt with.
Off topic for this thread, I know. .rant over lol