#discord-c2

[ follow ]
#nodecordrat #npm-supply-chain #credential-and-wallet-theft #chaosbot #rust-malware #dll-sideloading
Information security
fromThe Hacker News
1 week ago

Researchers Uncover NodeCordRAT Hidden in npm Bitcoin-Themed Packages

Malicious npm packages delivered NodeCordRAT, a Discord-controlled RAT that steals Chrome credentials, API tokens, and crypto wallet seed phrases and executes commands via postinstall.
Information security
fromThe Hacker News
3 months ago

New Rust-Based Malware "ChaosBot" Hijacks Discord Channels to Control Victims' PCs

ChaosBot is a Rust-based backdoor using Discord C2, compromised credentials, WMI, DLL sideloading, and an FRP reverse proxy to enable reconnaissance, command execution, and persistence.
[ Load more ]