Malo a NPM adazindikira maphukusi 17 oyipa omwe adagawidwa pogwiritsa ntchito mtundu wa squatting, i.e. ndi kupatsidwa kwa mayina ofanana ndi mayina a malaibulale otchuka ndi kuyembekezera kuti wogwiritsa ntchito apanga typo pamene akulemba dzina kapena sadzawona kusiyana kwake posankha gawo kuchokera pamndandanda.
Discord-selfbot-v14, discord-lofy, discordsystem, ndi discord-vilao phukusi adagwiritsa ntchito mtundu wosinthidwa wa library yovomerezeka ya discord.js, yomwe imapereka ntchito zolumikizana ndi Discord API. Zigawo zoyipazo zidaphatikizidwa mu imodzi mwamafayilo a phukusi ndikuphatikiza pafupifupi mizere ya 4000 yamakhodi, obisika pogwiritsa ntchito dzina losintha la mangling, kubisa kwa zingwe, ndi kuphwanya ma code. Khodiyo idasanthula FS yakomweko ya ma tokeni a Discord ndipo, ikapezeka, idawatumiza ku seva ya omwe akuwukirawo.
Phukusi lolakwitsa lokonzekera lidanenedwa kuti likonza zolakwika mu Discord selfbot, koma linaphatikizapo pulogalamu ya Trojan yotchedwa PirateStealer yomwe imaba manambala a kirediti kadi ndi maakaunti okhudzana ndi Discord. Chigawo choyipacho chidatsegulidwa ndikuyika JavaScript code mu kasitomala wa Discord.
Phukusi la prerequests-xcode linaphatikizapo Trojan yokonzekera mwayi wofikira kutali ndi makina a wosuta, kutengera pulogalamu ya DiscordRAT Python.
Akukhulupirira kuti owukira angafunike mwayi wopeza ma seva a Discord kuti atumize malo owongolera a botnet, ngati projekiti yotsitsa zidziwitso kuchokera kumakina osokonekera, kubisa ziwonetsero, kugawa pulogalamu yaumbanda pakati pa ogwiritsa ntchito a Discord, kapena kugulitsanso maakaunti a premium.
Phukusi lawafer-bind, wafer-autocomplete, wafer-beacon, wafer-caas, wafer-toggle, wafer-geolocation, wafer-image, wafer-form, wafer-lightbox, octavius-public ndi mrg-message-broker adaphatikizapo code. kutumiza zomwe zili muzosintha za chilengedwe, zomwe, mwachitsanzo, zingaphatikizepo makiyi ofikira, zizindikiro kapena mawu achinsinsi ku machitidwe ophatikizana osalekeza kapena malo amtambo monga AWS.
Source: opennet.ru