Last week, hackers published a list of Discord credentials (email addresses/passwords) that were allegedly phished from the users of the gaming chat platform.

Last week, a group of hackers published a list of Discord login credentials (email addresses andpasswords) that were allegedly phished from the users of the gaming chat platform.

Fortunately, the list is composed only of around 2,500 entries.

“This was no virus, worm or malware of any sort—it was simple old phishing site that utilized Discord’s own moronic API to hijack these accounts,” reads a message wrote by the hackers in a message on their website.

The hackers also shared an archive containing the credentials, some of them labeled as invalid.

“Along with their message, the hackers posted a database of the allegedly phished credentials, split into multiple sections of those that work and those that don’t. Some of the invalid login details are clearly fake, with emails such as “fucking@phish.io” and the password “fucku,” likely from people who are trying to provide the hackers with garbage data.” wrote Joseph Cox on Motherboard.

Motherboard verified that some of the data in the archive were genuine and associated with active Discord accounts.

As usual, let me suggest to enable two-factor authentication when implemented by the service, this could help you to protect your account in case of a data breach.

To setup two-factor authentication on Discord you read the guide provided by the support.

window._mNHandle = window._mNHandle || {};
window._mNHandle.queue = window._mNHandle.queue || [];
medianet_versionId = “3121199”;

try {
window._mNHandle.queue.push(function () {
window._mNDetails.loadTag(“762221962”, “300×250”, “762221962”);
});
}
catch (error) {}

Pierluigi Paganini

(SecurityAffairs – Discord, data breach)

The post Hackers published a list of allegedly phished Discord login credentials appeared first on Security Affairs.