Hackers steal Discord accounts with RedTiger-based infostealer
Source Reddit InfoSec News
Description
A new high-severity threat involves hackers using a RedTiger-based infostealer malware to steal Discord accounts. This malware targets users by harvesting credentials and sensitive information stored on infected systems, enabling attackers to hijack Discord accounts. The infostealer operates stealthily, often delivered via phishing or malicious downloads, and can compromise user privacy and security. Although no known exploits in the wild have been reported yet, the threat is considered high due to the potential impact on account integrity and the widespread use of Discord in both personal and professional contexts. European organizations using Discord for communication and collaboration are at risk of account takeover, which could lead to data leaks, impersonation, and further lateral attacks. Mitigation requires targeted user education, endpoint protection tuned to detect infostealer behaviors, and multi-factor authentication enforcement on Discord accounts. Countries with high Discord adoption and active infosec communities, such as the UK, Germany, France, and the Netherlands, are likely to be most affected. Given the malware’s capability to compromise confidentiality and integrity without requiring user interaction beyond initial infection, the suggested severity is high.