It Has Been Announced That The Malware Using Discord Is Increasingly Increasing!

Cyber ​​security firm Sophos has announced that malicious software using the content distribution network of Discord, the messaging platform that brings players together, is constantly increasing. Some of the software targets players' information, while others target Discord directly.

It turned out that the content distribution network of Discord, a player-oriented messaging platform, was used by malicious users to distribute malicious software. According to a report by Sophos, the content delivery network has detected and blocked 140 times more malware in the last two months compared to the same period in 2020. The authors of the report, Sean Gallagher and Andrew Brandt, stated that in the second quarter of 2021, 17,000 unique links were detected that directed users to malware.

Among those 17,000 links, only malware hosted by Discord, which hosts files on Google Cloud and uses Cloudflare as the interface. Malware hosted elsewhere and taking advantage of the content delivery network may account for much more than this figure. Malicious users use the APIs of Discord's chatbot to command targets that receive malware and to leak stolen data to private servers.

The main purpose of software is information theft:
Although the malware that uses the platform varies, according to the authors of the report, most of them aim to steal credentials directly or to steal data through remote access Trojans (Trojans). Among the software, there were also sighted ransomware targeting Android platforms, employees clicking on advertisements, banking trojans and not offering any payment method to attackers.

Some malware, such as the Minecraft installer, which records keystrokes and takes screenshots, targets players, while others target Discord itself. These softwares steal user login information and authentication tokens by disguising themselves from private browsers to 'cracked' Adobe applications.

Malicious users also harm the platform through social engineering. These people send the malware they have to the players under the pretext of generating passwords to obtain Discord's premium Nitro service. It was discovered that one of these software disabled dozens of security tools and the internal protection features of Windows.