Jan 22, 2024NewsroomBrowser Security / Cyber Threat Cybersecurity researchers have discovered a new Java-based "sophisticated" information stealer that uses a Discord bot to exfiltrate sensitive data from compromised hosts. The malware, named NS-STEALER, is propagated via ZIP archives masquerading as cracked software, Trellix security researcher Gurumoorthi Ramanathan said in … [Read more...] about NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers
Discord
Letters with Remcos RAT hosted in Discord
Since the beginning of the summer, Kaspersky systems have been recording an increase in the detection of Remcos remote-access trojan attacks. The probable reason for this is a wave of malicious emails in which attackers try to convince employees of various companies to click on a link for malware installation. Malicious letters The bait that the attackers are using in this … [Read more...] about Letters with Remcos RAT hosted in Discord
New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs
Jun 14, 2023Ravie LakshmananCyber Threat / Malware A new Golang-based information stealer called Skuld has compromised Windows systems across Europe, Southeast Asia, and the U.S. "This new malware strain tries to steal sensitive information from its victims," Trellix researcher Ernesto Fernández Provecho said in a Tuesday analysis. "To accomplish this task, it searches for … [Read more...] about New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs
11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
Cybersecurity researchers have uncovered as many as 11 malicious Python packages that have been cumulatively downloaded more than 41,000 times from the Python Package Index (PyPI) repository, and could be exploited to steal Discord access tokens, passwords, and even stage dependency confusion attacks. The Python packages have since been removed from the repository following … [Read more...] about 11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells
Malware on Discord and how to protect oneself
In the six years since the launch of Discord’s chat and VoIP service, the platform has become a popular tool for building communities of interest, especially among gamers. However, just like any other platform that hosts user-generated content, Discord can be exploited. Discord’s extensive customization options also open the door to attacks on ordinary users, both on and off … [Read more...] about Malware on Discord and how to protect oneself
Cryptoscammers target ICO investors in Discord
Following the helicopter money and fake cryptocurrency exchange scams, the Discord scam saga continues, this time with cybercriminals hitting ICO investors. What ICOs are, and how they work ICO is short for Initial Coin Offering. Before making them available for free trading on cryptoexchanges, makers of new cryptocurrencies release some tokens — typically to raise initial … [Read more...] about Cryptoscammers target ICO investors in Discord
Attack on DEX exchange clients in Discord
Following recent scams involving fake cryptocurrency exchanges and fake news sites, we recently uncovered a third campaign, one using fake DEX exchanges and aimed at cryptocurrency enthusiasts on the Discord messaging app. Here’s how the new scheme works. A word about cryptocurrency exchanges First, what’s a DEX? Two types of cryptocurrency exchanges exist: centralized (CEX) … [Read more...] about Attack on DEX exchange clients in Discord
Crypto scam on Discord uses fake news websites
Since we described how scammers are tricking Discord users into registering on fake cryptocurrency exchanges, they have harnessed new and even more effective techniques. What’s the catch, and can you protect yourself? Origins In the earlier grift, members of Discord cryptocurrency communities received private messages from trading platforms supposedly giving away … [Read more...] about Crypto scam on Discord uses fake news websites
How scammers lure Discord users to a fake cryptocurrency exchange
Discord was originally created for gamers, but thanks to its handy system of “servers” (communities), channels, and private messages, it’s brought in all kinds of people, from study groups to common-interest clubs — including fans of cryptocurrency. On their servers, traders discuss the latest on altcoins, investors share predictions, and scammers ponder how to cash in on both. … [Read more...] about How scammers lure Discord users to a fake cryptocurrency exchange