New ransomware attacks your Discord account and extracts your cryptocurrencies
Discord_Ransomware_Alert

New ransomware attacks your Discord account and extracts your cryptocurrencies

By Paraguanads | Cryptalk | 24 May 2020


Most cryptolovers on the internet use the Discord chat platform, not only to talk to their peers and find incredible rewards, but also to store, in turn, received cryptocurrencies on the servers where they are. That's why Internet hackers have come up with a new way to snatch their coins from users using a new technique.

This is AnarchyGrabber3, a highly infectious Trojan that steals passwords from Discord profiles, disables 2FA and in turn spreads (like a Trojan) through direct messages to the friends list with flashy offers (free paid games, free premium software or even free cryptocurrencies). This Trojan attacks users with the desktop version of Discord.

Once the Trojan enters the victim's system, it overwrites the JavaScript file index.js in the Discord client's path and automatically calls the attacker's machine, which can log in to your account and remove all the coins.

How do I know if I am infected with the AnarchyGrabber3 Trojan?

First of all, you must go to the path of your hard disk containing the Discord client. In almost all cases (for Windows users) it is C:\Users\Your_user\AppData\Roaming\Discord\version\modules\discord_desktop_core. Then, being there, open in a notebook the file index.js

AnarchyGrabber3_1

You must check that your file looks like the following picture. If there are any extra lines of text, your Discord client has probably been compromised by this trojan

AnarchyGrabber3_2

If there is another line written, besides that, quickly disable your internet access, then go to Control Panel - Add or Remove Programs and uninstall Discord completely. Then activate your internet access again and download this free antivirus. It is the best on the market for detecting threats https://www.malwarebytes.com/mwb-download/. After the scan of your system is completed and your system has been cleaned of viruses and threats, proceed to download the Discord client again.

Were you infected by this trojan? Make your comment about it and help us to detect the sources of infection to report them in all antiviral databases so they can be detected by everyone.

Thanks to BleepingComputer for their marvelous article. See it here https://www.bleepingcomputer.com/news/security/discord-client-turned-into-a-password-stealer-by-updated-malware/

How do you rate this article?


11

0

Paraguanads
Paraguanads

Venezuelan lawyer, cryptocurrencies early adopter and writer as hobby.


Cryptalk
Cryptalk

This blog has been created in order to talk about Blockchain technology in all kind of ways. Feel free to follow and comment.

Send a $0.01 microtip in crypto to the author, and earn yourself as you read!

20% to author / 80% to me.
We pay the tips from our rewards pool.