Discord is now an essential tool for hackers

Gaming-centric messaging platform Discord has become a favorite tool among cybercriminals, research suggests. A new report from security...

Gaming-centric messaging platform Discord has become a favorite tool among cybercriminals, research suggests.

A new report from security company Sophos shows that Discord, which has grown rapidly in popularity in recent years, is now regularly used to host, distribute and control different kinds of malware.

What’s more, the issue is becoming more grave by the week. Over the past two months, Sophos has detected almost 140 times the number of Discord malware threats than in the same period last year.

In Q2, the firm discovered 17,000 unique malware URLs in the Discord content delivery network, almost 5,000 of which remain active at the time of writing. Most of these malware strains are classified as infostealers, which are designed to lift account credentials and other personal information.

Discord malware

According to Sean Gallagher, Senior Threat Researcher at Sophos, Discord has become an increasingly enticing tool for cybercriminals due to its extensive infrastructure and increasingly large customer base.

“Discord provides a persistent, highly-available, global distribution network for malware operators, as well as a messaging system that these operators can adapt into command-and-control channels for their malware,” he explained.

“Discord’s vast user base also provides an ideal environment for stealing personal information and credentials through social engineering.”

Often, hackers disguise malware as tools to help players cheat in video games aimed predominantly at younger audiences, such as Fortnite or Roblox. In other instances, victims might be offered a chance to sample a game still under development.

Sophos also discovered that old ransomware from the early 2000s was circulating on the platform as mischiefware, a type of malware that revokes access to the victim’s files without providing any means of recovery.

In the report, Sophos commended Discord on the swiftness with which it responds to takedown requests, but also advised users to take a handful of steps to shield against potential scams on the platform.

The company advised Discord users to use multi-factor authentication to guard against account takeover and to ensure their device is also protected by an up-to-date antivirus service. As a side note, the firm added that users should never download unlicensed software, no matter how reputable the source.

“Discord users, whoever they are and whatever they use the platform for, should remain vigilant to the threat of malicious content and not just leave it to the Discord platform to identify and remove suspicious files,” added Gallagher.

“In addition, IT security teams should never consider any traffic from an online cloud service as inherently ‘safe’ based on the trusted nature or legitimacy of the service itself. Adversaries could be hiding anywhere.”

Asked for comment on the Sophos report and for clarification over the measures in place to prevent the circulation of malware, Discord told TechRadar Pro it relies on a multi-layered approach.

"Platform security is a priority for us. Discord relies on a mix of proactive scanning - such as antivirus scanning - and reactive reports to detect malware and viruses on our service before they reach users. We also do proactive work to locate and remove communities misusing Discord for this purpose. Once we become aware of these cases or bad actors, we remove the content and take appropriate action on any participants," explained a Discord spokesperson.

"We value feedback from trusted sources like Sophos whose expertise can help identify malware so that we can remove it and ensure no further distribution occurs on Discord."

from TechRadar - All the latest technology news https://ift.tt/3rDt1nr



Apps,3855,Business,148,Camera,1154,Earn $$$,1,Gadgets,1739,Games,924,Innovations,1,Mobile,1695,Paid Promotions,3,Promotions,3,Technology,7934,Trailers,795,Travel,36,Trendly News,21219,Video,4,XIAOMI,12,
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews: Discord is now an essential tool for hackers
Discord is now an essential tool for hackers
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy