Joined a discord server a week back, was greeted with captcha from captcha bot, completed and forgot about it.
Now, today I see this message from the same channel,
It dawned on me that I was phished... Everything appears to be intact however.
From bit
reading, it appears that this used to ask to connect to metamask after you complete captcha. May be its due to that I was on mobile and their script didn't run?
Anyway, to be safe, changed password (as it resets token and resets you out of all logged in sessions), enabled 2fa and removed apps from 'authorized apps'.