HN Explorer

Tell HN: Major Discord server (Valheim) just hacked

5 points by cedws ↗ HN
A group of people have managed to completely own the Valheim Discord server of over 50k members. They've created a fake new server for Valheim and are linking to a 'brand new video game' download on WeTransfer. Needless to say I look forward to the post mortem. This is a pretty bad incident.

Here is what they posted: https://imgur.com/a/GmQBkgc

13 comments

[ 2.9 ms ] story [ 41.2 ms ] thread
[deleted]
(comment deleted)
RadRain
Admin would have been the first to get kicked
SteveTheS
Ooooooooof -- I left that server months ago because of security and culture concerns. Sucks for 'em, but can't be that fast and loose with link perms and you need more than three moderators and one Discord main keeping watch.
HackedValheim
I downloaded and ran the game they sent, anyone know what sort of Malware it is?
[dead] HelpValHack
[flagged]
ex0ll
I also downloaded and ran the game, did you manage to find out any information about it?
test1234242
Don't be foolish, if you ran the game then do a fresh install, delete everything. Because it is a RAT or a trojan certainly. Or something worse.
cedws
It's a RAT with password stealing capabilities and can also take pictures via webcam I'm told. You should completely reset your computer and change all your passwords. Ideally cancel all of your debit/credit cards and get new ones.
abrugsch
@Princec was the owner of the puppygames discord server. He got pwned and lost control of his Discord account, discord server and epic games store. The new pwner of the princec account then managed to get control of the Valheim server and start funnelling people to the also compromised puppygames server (now hastily renamed Valheim) to further attempt to distribute their malware (apparently a pretty nasty rootkit if you follow the puppygames twitter - https://twitter.com/puppygames/status/1751999253713498484 )