![discord token grabber discord token grabber](https://www.netskope.com/wp-content/uploads/2020/11/TroubleGrabber-9.png)
It then sends them as a chat message back to the attacker via a webhook URL. The payloads steal victims credentials like system information, IP address, web browser passwords, and tokens.TruoubleGrabber using Discord and Github for downloading the next stage payloads to the victim’s machine.The delivery of TroubleGrabber to the victim’s machine via Discord attachment link.The depiction in Figure 2 illustrates the following steps Figure 2: TroubleGrabber attack kill chain The visual depiction of the TroubleGrabber attack kill chain is shown in Figure 2. The files associated with these detections used Discord for malware delivery, next stage payloads, and C2 communication. TroubleGrabber – Gen:Variant.Razy.742965 and Gen:Variant.Razy.728469 were the first stage payload of Gen:Variant.Razy.729793, a new malware variant we had not seen before October 2020.All the files associated with these detections were delivered via Discord.
#Discord token grabber cracked#
#Discord token grabber generator#
This post will detail the technical analysis of TroubleGrabber and provide insights on the generator and its creator. We discovered TroubleGrabber in October 2020 when researching public Discord attachments for our previous blog post, Leaky Chats: Accidental Exposure and Malware in Discord Attachments. Based on the file names and delivery mechanisms, TroubleGrabber is actively being used to target gamers. This information is sent via webhook as a chat message to the attacker’s Discord server. This malware, which primarily arrives via drive-by download, steals the web browser tokens, Discord webhook tokens, web browser passwords, and system information.
![discord token grabber discord token grabber](https://i.ytimg.com/vi/VmgYkZ9fE8E/maxresdefault.jpg)
TroubleGrabber is written by an individual named “Itroublve” and is currently used by multiple threat actors to target victims on Discord. While it bears some functional similarity to AnarchyGrabber, it is implemented differently and does not appear to be linked to the same group. “TroubleGrabber” is a new credential stealer that is being spread through Discord attachments and uses Discord messages to communicate stolen credentials back to the attacker.