I reversed a Node.js malware and found the author

Re:I reversed a Node.js malware and found the author by b_u_n_n_y on Wednesday February 02, 2022 @02:13AM (#30174711)

Excuse my ignorance, but what does this particular malware do? Control computer? See what the were typing?

[ Parent | on HN ]

Re:I reversed a Node.js malware and found the author by Mashimo on Wednesday February 02, 2022 @02:21AM (#30174754)

* Discord Credit Card Stealing * Discord Login Stealing

[ Parent | on HN ]

Re:I reversed a Node.js malware and found the author by smorgusofborg on Wednesday February 02, 2022 @03:32AM (#30175168)

I didn't really get that comment in the OP. There's not an API that gives you your entire stored credit card information? Right?

[ Parent | on HN ]

Re:I reversed a Node.js malware and found the author by tisryno on Wednesday February 02, 2022 @04:53AM (#30175610)

No, there's no direct API for that. What the malware does is inject javascript into your discord, so if you add any payment details to your account it will harvest the data and send it via the Webhook to the owner.

The injected code also will scan your friends for "rare" badges, like the Bot Developer, Early Supporter and Certified Moderator. They use this information to then target the malware to those people in the hopes they can sell the rare badge accounts.

[ Parent | on HN ]