Mare

Discord malware skids are taking advantage of cookie and token vulnerabilities using infostealer malware that grabs browser cookies, passwords, auto-fills, and more from infected PCs. Cayte/CT has recently reported that the controversial game Roblox continues to host and facilitate criminal activity, with Discord serving as the main middleman for messaging and coordinating scams. Users are being targeted through hoax .exe files and forwarded messages that spread InfoStealer malware, which grabs browser cookies, passwords, auto-fills, and more from infected PCs. A prime example involves the Discord user “EddyKane,” who first contacts victims on Roblox claiming to have insider info and big investment opportunities, then sends malicious files or links (sometimes hidden in embeds). These logs show attackers stealing session cookies, like the 7 shown here, plus hundreds of auto-fills, allowing them to hijack Discord, wallets, and other accounts instantly. Avoid random exes, cracked software, and shady downloads. Stay safe by enabling 2FA and using a good password manager.

@metoprolel Trust me, I've seen lots of people larping CNCs from 764.

@Mvresy it just dropped … hasnt been a thing i been watching em for awhile

we got 764 larping other ppls cnc’s now …… what has sociecty came to lol

@metoprolel No idea tbh, Batman is called Admin on the site, but he’s not active on it anymore for some reason.

@Mvresy Vladislav Levkovsky is hanging out with the larp kt which i’d imagine is batman then ?

if i had to guess it’s the ceo guy that claims he owns doxbin

@skeiwy That is why I’m posting about this cookie/token logging exploit.

@Mvresy Isn't it better to avoid downloading .exe files from someone you DON'T know...? As long as dumb people like them, stupid people like EddyKane, will continue to profit from this.

Discord malware skids are taking advantage of cookie and token vulnerabilities using infostealer malware that grabs browser cookies, passwords, auto-fills, and more from infected PCs. Cayte/CT has recently reported that the controversial game Roblox continues to host and facilitate criminal activity, with Discord serving as the main middleman for messaging and coordinating scams. Users are being targeted through hoax .exe files and forwarded messages that spread InfoStealer malware, which grabs browser cookies, passwords, auto-fills, and more from infected PCs. A prime example involves the Discord user “EddyKane,” who first contacts victims on Roblox claiming to have insider info and big investment opportunities, then sends malicious files or links (sometimes hidden in embeds). These logs show attackers stealing session cookies, like the 7 shown here, plus hundreds of auto-fills, allowing them to hijack Discord, wallets, and other accounts instantly. Avoid random exes, cracked software, and shady downloads. Stay safe by enabling 2FA and using a good password manager.

@whystruck This simple malware is too hard for 764 skidiots, TRUST me.

@Mvresy this is what 764 members do

"White people are starting to be comfortable being called a racist"

‼️UPDATE: Over 1,500 packages have been backdoored, going from 400 to 1,500+ in just 3 days. Credits to @thecybersecguru for the update.

@metoprolel happy late birthday 🎉🥳!! Soz for being a day late, did not know it was your birthday until now 😔😅

@h4tsqu1d Posted about this on my page, maybe drop a follow too..?🥺👉👈

...

🚨 Arch Linux AUR Supply Chain Attack: Hundreds to ~1,250 Packages Compromised Attacker posed as maintainer, adopted orphaned packages, and added malicious code to PKGBUILD/.install scripts (npm/Bun deps). Rust infostealer targets creds (SSH, browser, GitHub, Discord etc.). Optional eBPF rootkit if run as root. Actions: Audit recent AUR installs (since ~June 9), review PKGBUILDs, rotate creds if affected. Verify all AUR packages. Credits to @IntCyberDigest

🚨 LAPSUS$ is back online. The notorious hacking group has launched a new clearnet domain: lapsus.bz. After going quiet, this could mark a fresh chapter in their operations. Cyber defenders, stay sharp. #LAPSUS #CyberSecurity Courtesy of @DarkWebInformer

For everyone wondering; The fake KT runs a copy DB Channel, Admitted to needing status. KT SOLD @ for $20,000 -> TON Coin. All old DB Staff are either unrelated to site now or have real life problems to deal with. Actual KT is now married with a child. Possibly Still In Service

@h4tsqu1d The Turkish are coming 😳😳

@Mvresy He smokes meth with turkeys.

A 24-year-old 764-affiliate named Christian Zachary Page, username "Xavier Eilux," is indicted in Kansas on federal CSAM charges. He was closely associated with arrested 764 member Aaron Corey ("Baggeth"), whose SoundCloud page credits Xavier Eilux for his album cover art.

@metoprolel I find entertainment in trashing 764 morons, they all are aware about me anyways 🙏

@Mvresy this miu mare i recommened u leave them 764 chats endless u reporting them …

764 has came down to we got a larper claiming a larper is larping them being a larper 🕺😹

Just in: Alot Roblox Rare items being taken because PlayStation Accounts linked to them are being taken by ComKids After that they change the billing and steal the Items of Roblox. Well over 400k$ of Item worth was drained already.

top kek youtube.com/shorts/9e8xDxa…