Be Careful If You Use Discord

Margrette

Not a Discord user myself and haven't played much lately, but saw this mentioned on Twitter and thought maybe it would help someone here.  https://www.bleepingcomputer.com/news/security/discord-client-turned-into-a-password-stealer-by-updated-malware  

Acid_Rain

Link comes up “Page Not Found” for me. Here’s a link that hopefully works for those interested. Thanks to Tina Small for bringing this to attention.
https://www.bleepingcomputer.com/news/security/discord-client-turned-into-a-password-stealer-by-updated-malware/

Margrette

Thanks for giving the correct link. I dropped off a slash when I copied the URL.

Mariah

Having read this I find that this doesn't happen without some action on the part of the 'victim'.

Threat actors then distribute the trojan on Discord, where they pretend it's a game cheat, hacking tool, or copyrighted software.

So the moral here is, be very careful what you download, also the old adage 'if it seems to good to be true, it probably is.' seems to apply.

Acid_Rain

Mariah said:

Having read this I find that this doesn't happen without some action on the part of the 'victim'.

True enough at the time of this reporting. The ways listed are probably currently the most common and prolific dissemination of the malware. If it hasn’t been done already however, the next step will be a self executing run once/delete file embedded in something most folks will unknowingly access. Until then, business as usual folks