TroubleGrabber Malware

Users of the popular Discord platform were targeted by the threatening AnarchyGrabber infostealer mercilessly, which was released in the first months of 2020. Since then, many malware creators have experimented with different Discord-compatible malware similar to AnarchyGrabbe. However, it may sometimes boast additional features. One of the latest threats to fit this profile is called the TroubleGrabber Malware.

Interestingly, the authors of the TroubleGrabber Malware appear to be focused on spreading it via Discord exclusively – over 98% of active copies of the TroubleGrabber Malware were delivered to the victims via corrupted Discord attachments. The other 2% of the cases also are likely to have involved Discord, but the victims ended up downloading the corrupted binary from a file-hosting service.

The TroubleGrabber Malware is able to grab Discord tokens, system information and data saved in Web browsers. The malware relies on a Discord server to receive commands and exfiltrate data. Experts suspect that there might be more than one group of criminals using the TroubleGrabber Malware at the time actively.

The popularity of malware for Discord is likely to be owed to the fact that it is easy-to-create thanks to the open-source AnarchyGrabber project. Thankfully, such malware is rather limited in terms of functionality, and it is incapable of bypassing moderate security measures. Users who make sure to keep their systems protected by a reliable anti-virus product are unlikely to be affected by TroubleGrabber Malware's attack.