The targeted system is infected with malware – in this case, one that Trend Micro detected as TSPY_RAPID.A.This particular abuse method using webhooks can be broken down into the following steps: In this manner, Discord is really being used as an information exfiltration channel. A webhook, simply put, is a feature that allows the chat program to send a message to a specified channel or user when a certain requirement of a specified app or program is fulfilled. More specifically, the feature being abused is the ability of Discord to use webhooks.
In doing so, cybercriminals can steal browser cookies containing ROBLOX login credentials from a targeted system that also uses Discord.
Pacifico roblox home code#
How does Discord figure into the modus operandi of cybercriminals in attacking ROBLOX players? Through our research, we have discovered that cybercriminals are abusing a built-in feature of the chat platform - namely, its application programming interface (API), which enables it to run user-created code and apps. ROBLOX also has a social networking element that encourages users to socialize, play and create content together, and take part in the earning and spending of ROBUX - the game’s own virtual currency that can be traded for real cash. ROBLOX relies heavily on user-created content to thrive it allows its players to create their own mini games and environments within the ROBLOX game world that other players can then play and share. This attack scenario involves ROBLOX, a highly popular massively multiplayer game with more than 178 million registered accounts and more than 12 million monthly active users. We’re referring to Discord, a new-generation chat platform that gamers frequently use, with a user base of more than 45 million registered members. In the particular scenario we are describing in this blog post, however, it is not the game that is being abused by the cybercriminals, but rather one of the communication tools used by the game players. And usually, for that purpose the game itself is abused. Usually the aim is simple: to steal personal information and monetize it. We’ve reported many similar incidents in the past, from fake game apps to real-money laundering through online game currencies. Cybercriminals targeting gamers are nothing new.
0 kommentar(er)
