she thinks they got access to her desktop so I think RAT. apparently she installed something minecraft recently. asked her if she installed it from a link somebody sent to her but no reply yet

if they got access to her desktop they could have just about anything including financial shit for chudbuds