The malware is now called AnarchyGrabber3, and with this new variant, an attacker can also steal a victim's plain text password and command an infected client to spread malware to a victim's friends on Discord.īy stealing plain text passwords, the attackers can use them in credential stuffing attacks to compromise the victim's accounts at other sites. AnarchyGrabber3 released last weekĮarlier this week, a threat actor released a modified AnarchyGrabber trojan that contains new and powerful features. Using this stolen user token, the attacker can log in to Discord as the victim. Once installed, past versions of the trojan modify the Discord client's JavaScript files to turn it into a malware that would steal a victim's Discord user token. Threat actors then distribute the trojan on Discord, where they pretend it's a game cheat, hacking tool, or copyrighted software. Keep the conversation engaging enough so that the target can be tracked from the different IP addresses that the Command Prompt throws up.A threat actor updated the AnarchyGrabber trojan into a new version that steals passwords and user tokens, disables 2FA, and spreads malware to a victim's friends.ĪnarchyGrabber is a popular trojan that is commonly spread for free on hacker forums and within YouTube videos that explain how to steal Discord user tokens. This establishes the connection between the target computer and yours. Make sure that the target is online as well and strike up a conversation with the user. On the opened-out web browser, open out the Discord account and log in.Close all the running applications on the computer with only the web browser being used at one time.These numerous addresses are eliminated one by one to give the address of the target user.

By executing the prompt, it is possible to have the Discord ID to the IP of all the participants in a conversation box displayed on the screen. The second method used to capture the IP address of a target would be to use the command prompt of the operating system in use which could be Windows. The end result not only gives out the IP address but also the location and type of device being used by the target user.Once the target has clicked on the disguised link, the URL is then pasted onto the Results Icon, and how to get someone’s IP from Discord is revealed.It is possible to customize and shield the actual URL so that the target does not suspect anything out of the ordinary in clicking the sent URL, as shown above.

Discord ip stealer