Vulcan Security Alert: Beware of Malicious Links
Summary
Vulcan warns the community about active malware cases: 4 ongoing incidents with 3 seemingly unrecoverable accounts. Do not click suspicious download or website links or execute files from others; malware can install trojans or cookie/session stealers that compromise Discord and logged-in web accounts. Google accounts can be converted to minors via Family Link, preventing recovery. Report hacked members to head admins.
I can't believe that I have to say that, but... do not click suspicious download and website links.
We have 4 ongoing cases where 3 Discord accounts seem unrecoverable.
DO NOT execute files sent by friends coming with messages like "I am currently working on xyz, can you take a look".
Executing those files will install malware on your pc. This can range from Trojans to info/cookiestealers. This does not only put your Discord Account at risk, but any logged in account on any website in any browser due to cookies/session tokens being able to bypass password and 2FA/MFA authentication.
For the Google Mail users among us:
When your Google account is hacked, the hacker will transform it into a minor account and put their own account as the guardian via family link. You will NOT be able to recover your account without the consent of the hacker.
Google is aware of that exploit, but is refusing to patch it. Your Mails, your cloud files, your photos, all gone by an instant.
If you know any currently hacked people that were not kicked yet, please let any of the @head admin s know.
