Another important note is that stealing the tokens require the malware to scan information collected from the browsers, including Safari, Chrome, Mozilla, Yandex, etc. The malicious code is designed to reprogram Discord to start a continuous transmission of the user’s token to a specific channel controlled by the attackers. NitroHack primarily targets to embed a malicious code into index.js file to steal users’ tokens. Currently, the Trojan embeds a malicious code to %AppData%\\Discord\0.0.306\modules\discord_voice\index.js file as well as make changes to Discord Public Test Build and Discord Canary clients. Experts believe that this software caught cybercriminals’ attention as is it exceptionally easy to modify various JavaScript files related to the software.
For example, the recent AnarchyGrabber malware is mainly developed to perform similar actions on Discord application as the NitroHack virus. Recently, there has been a significant increase in Trojans like this. The collected users’ tokens are directly transmitted to another Discord channel that is controlled by the attackers.
After the modification, this virus is capable to steal users’ tokens every time they log in to their account. Once it is inside, it makes certain modifications to the index.js file by appending a malicious code. This particular virus pretends to be a hack for the Discord premium Nitro service to infiltrate the system. NitroHack malware is the latest cyber threat targeting Discord users. Mandatory steps to successfully uninstall NitroHack virus from Discord.Attackers use victims’ accounts to distribute the malware.NitroHack virus targets Discord users to steal user tokens.
0 kommentar(er)
