NitroHack

Discord, one of the most popular services for gamers, has become an attractive target for cybercriminals due to some flaws in the software's design. One of the first hacking tools to exploit Discord is called the AnarchyGrabber, and it was used by a long list of cybercriminals to obtain data saved by the Discord client. Since then, cybersecurity researchers have identified dozens of infostealers that mimic the AnarchyGrabber's behavior, and today a brand new name has been added to the list – the NitroHack malware.

NitroHack is a piece of malware that is being propagated as a fake version of Discord that will supposedly unlock the Discord Nitro features, something that only premium Discord users can take advantage of. Users who fall for the tactic and run the corrupted file on their computers may allow the NitroHack malware to modify certain files of their Discord installation so that they will work as an infostealer.

The current version of NitroHack circulating online is able to extract Discord tokens, saved payment information on Discord, as well as Discord tokens saved by Web browsers. Thankfully, NitroHack cannot access information used by other applications, but it is entirely possible that the project might see updates in the future. Last but not least, NitroHack will send a pre-made spam message to all of the victim's Discord contacts, therefore spreading the threat even further.

Some of NitroHack's components can be removed with the help of an anti-malware service, but you should not forget that this malware changes the Discord installation on your computer. Getting rid of these changes is mandatory, and the best way to do this is to remove Discord entirely, and then perform a clean installation. Last but not least, do not forget that 'free premium services' for popular software is a popular trick among cybercriminals – if you ever receive such an offer, you should probably research it thoroughly before opting to make use of it.