How I got hacked and got my accounts back

[Hyper]

As some of yall have heard, I got hacked and the hacker almost got to every point of my digital infrastructure. I was a former sysadmin for MFGG and I still have credentials so that was revoked just to be extra safe.

This was originally a script for my YouTube channel but I decided to put it here instead because it's too focused on the event:
Since it is a MASSIVE wall of text, I just pasted my Google Docs of the incident to here.

I really appreciate your time listening to my experiences. I do want to give some pointers on how to keep yourself safe and prepare yourself in event of being hacked:

1. In this day of age, you cannot trust even your closest friends on social media. Because you never know if they got hacked. There are some ways to determine if it’s them like a secret phrase you disclose outside the chat or ask them a question only they know about you. If that doesn’t work or your friends don't know much about you. The number 1 rule of thumb is to never touch ANY files or any links you don’t recognize. If you have to, prepare your Discord account in a sandboxed environment like a virtual machine, make sure you have your backups like your passkeys ready, and do it from there.
   
2. Have a habit to log out frequently. Especially on systems that are more vulnerable like Windows. The less the active session you have, the less likely the hacker is able to hijack your accounts
   
3. Do not use any web browser passwords. It is best to have an offline password manager only on your phone and/or write it down in a notebook if you can keep it secure. Even though it is logged in, the password database and encryption key are typically laid around in your system that can be easily decrypted and it's not too much saving your password as a txt file.
   
4. It is best to have a YouTube channel tied to your Google account so that you can get the ball rolling by contacting YouTube Support on Twitter/X. Be sure to remember your YouTube account’s channel ID, name, and the URL to your latest videos. The more details you have, the more leverage you have to prove ownership.
   
5. If you have any old device sitting there collecting dust, register your Google account in it and keep it offline, the more old devices you have the better. Especially when your Google account got hacked, keeping it offline will prevent your Google account being synced and updated to the settings the hacker placed. Remember the security code from your Google account settings and remember the date/time. This will be your golden ticket to regain access to your hacked Google account when you’re communicating with YouTube support.
   
6. Always have multiple accounts as backups, never put all login in one basket (email). If your email account gets hacked, you’ll be in a worse position. And because of how Google handles my data, I cannot trust them to secure my most sensitive accounts anymore. I moved to Proton mail for that reason. I haven’t contacted Proton yet and hopefully I don’t have to end up in that point but from what I’ve heard they’re more proactive on protecting their consumers, especially paid customers.
   
7. If you have custom voicemail greetings on your phone, delete that and set that to default voicemail greetings. The reason why is that the hacker can utilize that to train AI and use it to impersonate you. In addition, if you receive unknown number calls, ignore them. If you have to answer, keep the silence and don’t even greet "hello".
   

Anyways, it was partially my fault not knowing the actual threat and letting my guard down for a moment. Please be careful out there, especially on Discord when it is a primary breeding grounds for hackers. Feel free to leave a comment below for any tips, your story/experience being hacked. I will try to read them and learn from yall as well.