8/20/2023 0 Comments Discord from browser![]() Meanwhile, anyone in the compromised Discord channel who notices the scam and replies is banned, and their messages are deleted by the compromised admin account. The unsuspecting Discord members click the link provided by the compromised administrator account, and are asked to connect their crypto wallet to the scammer’s site, where it asks for unlimited spend approvals on their tokens, and subsequently drains the balance of any valuable accounts. ![]() The attacker then loads the stolen token into their own browser session and (usually late at night after the admins are asleep) posts an announcement in the targeted Discord about an exclusive “airdrop,” “NFT mint event” or some other potential money making opportunity for the Discord members. However, the bookmark is actually a clever snippet of Javascript that quietly grabs the user’s Discord token and sends it to the scammer’s website. From there, the visitor is instructed to go back to and then click the new bookmark to complete the verification process. Those who take the bait are sent a link to a Discord server that appears to be the official Discord of the crypto news site, where they are asked to complete a verification step to validate their identity.Īs shown in this Youtube video, the verification process involves dragging a button from the phony crypto news Discord server to the bookmarks bar in one’s Web browser. You now have everything you need downloaded, as well as the hook between your Discord and Xbox accounts necessary for Discord voice chat to work on your Xbox console.This attack involves malicious Javascript that is added to one’s browser by dragging a component from a web page to one’s browser bookmarks.Īccording to interviews with victims, several of the attacks began with an interview request from someone posing as a reporter for a crypto-focused news outlet online. This will repair the authentication flow from the Discord app, to your web browser to sign in to Xbox, and then back to the Discord app. To resolve this, open your Discord app settings (long press the app icon on Android, and select App Info, then go to Set as Default, select Supported Web Addresses, and make sure and *. are both ticked. NOTE: There's a bug that can interrupt the flow between the app authentication from your browser and the Discord app as of writing. Follow the on-screen steps to sign in with your Xbox account and authorize Discord to connect with your Xbox account.This may prompt you to join the beta program for Discord on Google Play, until it goes public. Scan the QR code using the Discord QR code scan option found in the mobile app's settings.Back on your Xbox, go to the Parties & chats tab of the Xbox Guide menu and select the Try Discord on Xbox banner.In the Xbox app, sign in to your Xbox account.Download and install the Xbox app on the iOS App Store or the Android Google Play Store.In the Discord app, sign in to your Discord account.Download and install the Discord app on a Desktop, the iOS App Store, or the Android Google Play Store.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |