Hacker News Reader

Comment by cobertos | Hacker News Reader

Why do people go after Discord accounts so hard? They're not commonly used for OAuth into third party sites, they don't house money, and Discord makes it hard to get all the data out of an account anyway (GDPR request only returns your half of conversation, etc...). I don't understand.

Additionally, It's the only platform I've been hacked on. Someone compromised a friend's account and said they had made a game they wanted me to try (I'm an indie game dev so it seemed legit)

View on HN

Same reason mail servers are a massive target, it's for sending out spam. People are more likely to click suspicious links if they're coming from a friend.

Ah I forgot about Discord spam! I did used to get _a lot_ of that. Particularly surrounding crypto prpjects

Yeah, I've gotten my fair share of that. Though now it's more common for me to get fans.ly links and the like.

I'm glad Ive avoided that somehow, it stopped after the crypto spam stopped a year ago. Mostly after leaving a couple bigger servers.

Haven't got a single spam in all these years I'm using it - guess it all depends on the servers you're on

A lot of discord users are script kiddies or non technical users for whom Teamspeak 3, Ventrilo, Mumble, IRC, or Jabber were “too hard” to setup making them easy targets.

I’ve been a discord user since July 2015 and it was nice until people began to use it as an everything app and the hordes of children joined. I really really despise the discord userbase because they’re the new generation of the eternal September that ruins the internet.

Massive raise during the NFT boom to spam people with fake minting sites and also scam them out of their crypto in other ways.

Because hackers are mostly teens, teens are mostly on discord, and Discord accounts can have juicy private information.

Most of those projects listed aren't exclusively Discord "stealers", but seems to grab a bunch of things like cookies, tokens and more.

Yeah "discord stealer" basically means that it is a stealer that uses discord webhooks to deliver data from the victims. "stealer" is a type of malware that typically grabs cookies and saved login data from installed browsers along with extension data such as crypto wallets.

It also makes it easy to spread through messages or invites etc

The same reason 30 years ago we would force netsplits on IRC and hijack ops in channels.

True... Though I've seen projects selling Discord hacking as a SaaS. And I never understood who was paying for that service and why. I also don't know enough IRC to know if hacking it was monetizable in that way

No we only did it because we were jerky teenagers.

super common for crypto projects to use discord as their main community and communication

all of your assumptions are wrong due to many crypto communities moving or spawning there and it is quite lucrative

only have to be right once and there is a huge and gullible audience there

Reply on news.ycombinator.com