Hackers have updated the AnarchyGrabber trojan to a new version which is capable of stealing passwords and user tokens, disabling 2FA and spreading malware to a victim’s friends as well.
AnarchyGrabber is distributed for free on hacking forums and in YouTube videos and the trojan is used by cybercriminals on Discord who claim it is a game cheat, hacking tool or copyrighted software. Instead it modifies the Discord client’s JavaScript files to turn it into malware that can steal a victim’s Discord user token which is then used by an attacker to log into the popular chat service as the victim.
Experts Comments
May 27, 2020
Although previous versions have been blocked by anti-virus, newer versions appear to have been able to bypass anti-virus signature detection. Clients which have a dependency upon Javascript are especially attractive targets for attackers given the versatility that Javascript offers.
Registered users should examine the Discord Javascript index.js file as outlined in the linked article for signs of infection. If infection is found to be present, users should consider their account as good as.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Dr. Muhammad Malik, Editor-in-Chief, provides expert commentary at @Information Security Buzz.
"If infected, it is best practice to uninstall the current version and download the updated version from the Discord site and install it...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-on-anarchygrabber-trojan-update-stealing-discord-clients-passwords
Facebook Message
@Dr. Muhammad Malik, Editor-in-Chief, provides expert commentary at @Information Security Buzz.
"If infected, it is best practice to uninstall the current version and download the updated version from the Discord site and install it...."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/expert-on-anarchygrabber-trojan-update-stealing-discord-clients-passwords