3 ms·

Tell HN: Major Discord server (Valheim) just hacked

5 points by cedws 3y ago

A group of people have managed to completely own the Valheim Discord server of over 50k members. They've created a fake new server for Valheim and are linking to a 'brand new video game' download on WeTransfer. Needless to say I look forward to the post mortem. This is a pretty bad incident. Here is what they posted: https://imgur.com/a/GmQBkgc

Sneasel 3y ago
[flagged]
Sneasel 3y ago
[flagged]
deleted 3y ago
[deleted]
UnknownST24 3y ago
[flagged]
Anashex74 3y ago
[flagged]
RadRain 3y ago
Admin would have been the first to get kicked
SteveTheS 3y ago
Ooooooooof -- I left that server months ago because of security and culture concerns. Sucks for 'em, but can't be that fast and loose with link perms and you need more than three moderators and one Discord main keeping watch.
HackedValheim 3y ago
I downloaded and ran the game they sent, anyone know what sort of Malware it is?
HelpValHack 3y ago
[flagged]
- ex0ll 3y ago
  I also downloaded and ran the game, did you manage to find out any information about it?
  - test1234242 3y ago
    Don't be foolish, if you ran the game then do a fresh install, delete everything. Because it is a RAT or a trojan certainly. Or something worse.
  - cedws 3y ago
    It's a RAT with password stealing capabilities and can also take pictures via webcam I'm told. You should completely reset your computer and change all your passwords. Ideally cancel all of your debit/credit cards and get new ones.
abrugsch 3y ago
@Princec was the owner of the puppygames discord server. He got pwned and lost control of his Discord account, discord server and epic games store. The new pwner of the princec account then managed to get control of the Valheim server and start funnelling people to the also compromised puppygames server (now hastily renamed Valheim) to further attempt to distribute their malware (apparently a pretty nasty rootkit if you follow the puppygames twitter - https://twitter.com/puppygames/status/1751999253713498484 https://twitter.com/puppygames/status/1751999253713498484 )

5 points by cedws 3y ago

Sneasel 3y ago

[flagged]

Sneasel 3y ago

[flagged]

deleted 3y ago

[deleted]

UnknownST24 3y ago

[flagged]

Anashex74 3y ago

[flagged]

RadRain 3y ago

Admin would have been the first to get kicked

SteveTheS 3y ago

Ooooooooof -- I left that server months ago because of security and culture concerns. Sucks for 'em, but can't be that fast and loose with link perms and you need more than three moderators and one Discord main keeping watch.

HackedValheim 3y ago

I downloaded and ran the game they sent, anyone know what sort of Malware it is?

HelpValHack 3y ago

[flagged]

ex0ll 3y ago
I also downloaded and ran the game, did you manage to find out any information about it?
- test1234242 3y ago
  Don't be foolish, if you ran the game then do a fresh install, delete everything. Because it is a RAT or a trojan certainly. Or something worse.
- cedws 3y ago
  It's a RAT with password stealing capabilities and can also take pictures via webcam I'm told. You should completely reset your computer and change all your passwords. Ideally cancel all of your debit/credit cards and get new ones.

abrugsch 3y ago

@Princec was the owner of the puppygames discord server. He got pwned and lost control of his Discord account, discord server and epic games store. The new pwner of the princec account then managed to get control of the Valheim server and start funnelling people to the also compromised puppygames server (now hastily renamed Valheim) to further attempt to distribute their malware (apparently a pretty nasty rootkit if you follow the puppygames twitter - https://twitter.com/puppygames/status/1751999253713498484 https://twitter.com/puppygames/status/1751999253713498484 )