Discord Admins Hacked by Malicious Bookmarks
Summary: Cryptocurrency-focused Discord communities were hacked over the past month after administrators were tricked into dragging a malicious Javascript bookmarklet from a phony crypto news Discord server into their browser bookmarks bar, which captured their Discord token and sent it to the scammer's site. Attackers then used the stolen tokens, often late at night, to post fake airdrop announcements; Ocean Protocol's server was hit on May 22 despite the administrator having multi-factor authentication enabled, and Aura Network, Nahmii and MetrixCoin reported similar compromises in May.
Key Takeaway: The stolen token worked even with MFA turned on, and the attackers used it to strip all core Ocean team members from the server before the channel was restored roughly 30 minutes later - a window a globally distributed team happened to be awake to close.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026