Background: so I had installed an emulator on my pc to play a switch game. While playing, I started getting notifications on Instagram, and when I saw, there were some "mr beast" stories uploaded on my account. My discord account was also compromised and scamming messages were sent to my friends from my discord account. I immediately deleted the emulator and the game, ran a scan from the antivirus.
I looked it up online and it seemed like a session hijacking kind of an attack, because I have the authenticator app activated on both Instagram and discord, so it mostly likely happened because my browser had Instagram and discord logged in. I made sure to revoke the session from the browser and also changed the password for my Instagram and discord both. This happened a week ago.
Today, I got another notification on gmail accout. Which was a password reset email from the discord app, and it was of an account which isn't even logged into my pc, so that was very weird. I changed my Gmail's password as well, just in case. The Google's activity showed that this was done on a windows pc. Then a few mins later, I got a notification on my other gmail account, which was another password reset email of the twitter app. Now this is the weirdest bit. Because that twitter account is ONLY logged in my phone's twitter app. It was never logged in on my pc's browser. So I'm not sure how that was even hijacked. I changed the password of that Gmail account as well, that account's activity showed that this was done on ChromeOS.
Since that twitter account was only on my phone, does that mean that my phone is also compromised? Or does that mean that my gmail accounts were compromised and all the linked apps were being reset?
Can anyone please help me, and guide me on what I should be resetting?