Cookies and session tokens (allowing attackers to bypass 2FA). Cryptocurrency wallets and browser-based extensions.

: Immediately update credentials for all sensitive accounts (email, banking, social media) from a different, clean device .

Discord tokens, Telegram sessions, and gaming accounts (e.g., Steam, Roblox). What to Do