Check out all of the details of this month's Patch Notes, featuring the Mini-games + Quality of Life Update! https://mabinogi.nexon.net/news/91106/mini-games-quality-of-life-update-patch-notes-april-11th
[NEW MILLETIANS] Please note that all new forum users have to be approved before posting. This process can take up to 24 hours, and we appreciate your patience.
If this is your first visit, be sure to check out the Nexon Forums Code of Conduct. You have to register before you can post, so you can log in or create a forum name above to proceed. Thank you for your visit!

PSA : @ALL Discord-Users [News/Warning]

HabimaruHabimaru
Mabinogi Rep: 3,630
Posts: 761
Member
in Town Square
Although I am personally not much of a Discord-user it seems to be a «popular» enough platform to warrant alerting users of Discord.
Forwarding alert-message as follows...
News not related to any specific game or message-board but related to everyone using discord as a whole. @everyone

There is a new Discord Trojan attack doing the rounds where it logs you out of Discord and you have to log back in. Once you log back in, it then has access to your account and user tokens. With this information, it is disabling 2FA and locking the user out of their accounts. It then attempts to log into your linked accounts, such as YouTube, Twitch, Steam, etc.. If you use the same password for these accounts, then it will likely be successful in doing that.

This Trojan is being passed around disguised as a link to a game. If you download this fake "game", during its install process it will modify the Discord JS files instructing Discord to load up a couple of extra scripts that convert your password into plain text that it can then harvest. This is why it logs you out and you are required to log back in.

!! To prevent this from happening, do not download any software at all that has been passed to your Discord... even by a friend (hacked accounts are passing the software around via friends) until Discord put a fix in place for this.

If you have downloaded anything recently and you have been logged out of Discord, do not log back in. Instead, uninstall Discord and re-install it from the official discord website.
This does not affect the Web Browser version.

It has recently been covered by multiple websites; see the Forbes article below. The article below describes how you can check your own installation for the presence of this malware. It isn't hard; a single line in one file should tell you if you are infected. Read below for instructions:
https://www.forbes.com/sites/leemathews/2020/05/25/warning-malware-steal-discord-passwords/#4f74438b4572

Comments

  • KensamaofmariKensamaofmari
    Mabinogi Rep: 34,745
    Posts: 7,909
    Member
    So basically using the same old phising scam but on a more vulnerable target.
  • HelsaHelsa
    Mabinogi Rep: 23,380
    Posts: 5,768
    Member
    And using different passwords, and changing them often limits the damage.
    They came at us, in the old manner, and we saw them off, in the old manner.

Arthur Wellesley
    KensamaofmariWolfsinger