I reversed a Node.js malware and found the author

Re:I reversed a Node.js malware and found the author by smorgusofborg on Wednesday February 02, 2022 @03:32AM (#30175168)

I didn't really get that comment in the OP. There's not an API that gives you your entire stored credit card information? Right?

[ Parent | on HN ]

Re:I reversed a Node.js malware and found the author by tisryno on Wednesday February 02, 2022 @04:53AM (#30175610)

No, there's no direct API for that. What the malware does is inject javascript into your discord, so if you add any payment details to your account it will harvest the data and send it via the Webhook to the owner.

The injected code also will scan your friends for "rare" badges, like the Bot Developer, Early Supporter and Certified Moderator. They use this information to then target the malware to those people in the hopes they can sell the rare badge accounts.

[ Parent | on HN ]