I think someone has my token
I need help making sure I’m clean, not too sure what to do to keep my acc safe
Someone had me download a game from a site, but the site looked clean, it was secure, TLD or whatever
but as I was installing, my discord logged out.
I immediately changed my password, which if I’m not mistaken, changes my token too.
VirusTotal says the file is clean, but the file reports back to an ip that leads to the domain superfuniestindianparty.rip
I searched that up and it looks like it was also used in a discord trojan attack, seen here
the download site (DO NOT TRUST): https://cosmicdrifts.tech/
I AM UNABLE TO PERFORM AN ANY.RUN, AS THE DOMAIN ONLY ACCEPTS US IP ADDRESSES
Program contains UDS:Trojan-PSW.Win32.Disco, which is a type of ransomware designed to steal Discord tokens.
The domain superfuniestindianparty.rip actually redirects to iloveyoubby.ru, which is registered in the Russian Federation via RuCenter-Ru on February 18, 2022 - Whois iloveyoubby.ru
