How to check if your Discord client is infected What makes Discord modifying malware so effective is that most people will not even know that they are affectedĪs the malware performs various activities, infects the client, and then does not run again, updated malware definitions may not detect it.Įven if an antivirus software detects the Nitro Hack executable, it is unlikely to detect the client modification, which will continue running until a new Discord update overwrites them. Last month, we reported on a new version of the AnarchyGrabber malware that was modifying a Discord client to perform malicious activity. Unfortunately, Discord malware like this is becoming more common. This malware becomes quite effective at quickly building a broad base of victims by utilizing persistence, auto-spreading, and credential theft. It will also attempt to alter the same JavaScript file in the Discord Canary and Discord Public Test Build clients.Ĭause infected users to distribute the malware via DMS If a user downloads the promoted file and launches it, NitroHack will modify the %AppData%\\Discord\0.0.306\modules\discord_voice\index.js file and append malicious code to the bottom. This malware is being distributed on Discord to infected user's friends via DM messages that promote it as a way to get get you the premium Discord Nitro service for free. Last week, MalwareHunterTeam found a new malware called NitroHack that modifies the Windows discord client to turn it into an account-stealing Trojan. Malware turns Discord client into a trojan These modifications are precisely what a new malware called NitroHack is doing to steal Discord user tokens, steal saved credit cards, and spread the malware to your friends via Discord DMs. When you have an open platform like Discord that makes it easy to modify the JavaScript files utilized by the client, threat actors commonly abuse it to modify the client to perform malicious behavior. New malware is being distributed that pretends to be a hack that gets you the premium Discord Nitro service for free but instead steals user tokens saved in the various browsers, credit card information, and then tries to spread it to others.
0 kommentar(er)
