Home > News

Success of Discord and Slack Leads to Malware

By Laura Tucker
Discord Slack Malware Featured

Success always comes with a price. The pandemic has led to many changes – one of those being the need to reach out to people electronically, leading to the success of Zoom, Stack, Discord, etc. But the services now have a greater chance of being hacked. Discord and Slack became tools for hackers to spread their malware because of their success this past year.

Malware through Discord and Slack

Researchers at Talos, the security experts as Cisco, published their findings on what has happened to these social platforms during the pandemic. Discord and Slack are being used to publish links that look trustworthy but are actually spreading malware. Discord has even been integrated into malware.

It’s important to know that the research shows this isn’t the case of a weak app, and neither Stack nor Discord needs to be installed on the target’s computer or device. Hackers are using an exploit and the trust of a target.

“People are way more likely to do things like click a Discord link than they would have been in the past because they’re used to seeing their friends and colleagues posting files to Discord and sending them a link,” said Nick Biasini, one of the researchers.

Discord Slack Malware Email

“Everybody’s using collaboration apps, everybody has some familiarity with them, and bad guys have noticed that they can abuse them.”

As scary as that may seem, we know it’s there. We have had such a desire to connect with people, we are putting all our trust in chat apps.

The exploit used most often is when Discord and Slack are used to host files that are being shared. Cisco found malicious files being hosted. Hackers had tried to install nine remote access spy tools.

These malicious links don’t even have to be in Discord or Slack to deliver malware. Hackers can impersonate your colleagues and reach out to you via email and pretend to be your co-worker. Cisco saw a large increase in email-delivered malware over the past year.

Other security researchers have seen much the same thing. Zscaler noted they saw as much as two dozen variants of malware every day. Fake video games were also carrying Discord links. The hackers steal Discord authentication tokens, and this enables them to impersonate the users on the platform.

Discord Slack Malware User

Helping the hackers out, Slack and Discord utilize HTTPS encryption and compress uploaded files. This makes it more difficult to take the malicious links down.

The cyber attackers have also used an exploit on Discord that allows programmers to upgrade a channel on the platform with app or website information. They use this avenue to relay that information back to their server. The hackers’ actions are again hidden, as they add the malicious links in communication on Discord. It makes it harder to pull the hacking operation down.

Discord and Slack Response

“We are working to enhance our processes to make it easier to report these types of issues, improve the way these issues are internally routed for faster triaging, and dedicate more resources to proactively identifying this type of abuse,” said a Discord spokesperson.

Slack responded as well, noting how many exe files through external links it had blocked since February, That platform was recently criticized for making it easy for users to harass other users repeatedly.

Biasini said organizations should just block links from Discord, as legitimate links aren’t used that often in that manner anyway. For organizations that don’t even use Discord or Slack, they should just avoid the links like any other unknown link and bypass the threat of malware altogether.

“It’s the same old stuff: don’t click links from people you don’t know. If you don’t know where this came from, don’t buy into it. If it sounds too good to be true, it probably is,” Biasini said. “If you have never clicked a Discord URL before, don’t start now.”

Read more about the recent criticism of Slack, which led it to quickly take down a new feature.

Subscribe to our newsletter!

Our latest tutorials delivered straight to your inbox

Laura Tucker Avatar
Laura Tucker
Laura has spent more than 20 years writing news, reviews, and op-eds, with the majority of those years as an editor as well. She has exclusively used Apple products for the past 35 years. In addition to writing and editing at MTE, she also runs the site’s sponsored review program.

Read next

In 2016, archaeologists dated two rings of snapped stalagmites in France’s Bruniquel Cave to 176,500 years ago, evidence that Neanderthals had walked 336 metres into darkness with fire and built architecture deep underground long before modern humans reached Europe
Otto von Bismarck was 74 when Germany adopted the world’s first national old-age social insurance program in 1889, setting the pension age at 70 after years of fighting socialists with bans, laws, and a promise few workers would live long enough to use
When cosmonaut Valeri Polyakov stepped out of his Soyuz capsule in March 1995 after 437 consecutive days aboard Mir, doctors recorded him at several centimetres above his pre-flight height, and his spine had become so unaccustomed to gravity that the recovery team carried him to a chair rather than risk the compression of letting him walk.
When Bell Labs engineer Karl Jansky pointed a rotating antenna at the sky in 1932 looking for sources of transatlantic radio static, he kept picking up a faint hiss that peaked every 23 hours and 56 minutes, and he eventually realized he had become the first human to hear the center of the Milky Way.
A contemplative scene with two scientists in a vintage laboratory setting.
When Harvard astronomer Cecilia Payne submitted her 1925 doctoral thesis arguing that the Sun was made almost entirely of hydrogen, the field’s senior figure Henry Norris Russell talked her into adding a line calling the result ‘almost certainly not real,’ and then published the same conclusion himself four years later to widespread acclaim.
When seismic waves from the Chicxulub impact reached what is now North Dakota roughly ten minutes after the asteroid struck, they appear to have triggered a ten-metre standing wave in an inland river that flung fish onto the bank and buried them under glass beads still falling from the sky.
When survivors near Lake Nyos woke on the morning of 22 August 1986, the cattle were dead in the fields, the birds had fallen out of the trees, and 1,746 of their neighbours were lying where they had stood the night before, with no fire, no flood, and no wound to explain it.
In October 2002, a Russian scientist named Dimitri Malashenkov stood up at a space conference in Houston and quietly explained that the dog Laika, whom the Soviet Union had publicly mourned as a heroic week-long orbiter in 1957, had actually died of heat and panic within about five hours of launch.