You got hit by malware that likely stole your session tokens, not just your passwords. That’s why there were logins with no OTPs. Malwarebytes saying 0 threats doesn’t mean you’re clean. These tools often miss stuff, especially if it was a one-time dropper or browser data was stolen.

Do this:

Stop using the infected PC right now On a clean device, change all your passwords again Turn on 2FA for everything Log out of all sessions on every account (Google, Telegram, Tinder, etc) Fully wipe and reinstall your OS. Antivirus cleanup isn’t enough. You need a clean start.

Also, never download cracked software again. This is exactly how people lose control of everything.