Subj : Exela Stealer malware uses Discord to steal Windows users data
To   : All
From : TechnologyDaily
Date : Wed Sep 27 2023 12:45:04

Exela Stealer malware uses Discord to steal Windows users data

Date:
Wed, 27 Sep 2023 11:30:57 +0000

Description:
A new infostealer is exfiltrating sensitive data, such as passwords stored in 
browsers, through Discord.

FULL STORY
======================================================================

Cybersecurity researchers Cyble have recently uncovered a new malware strain 
for Windows, capable of stealing sensitive data from infected devices. # 

The malware is called Exela, and apparently, its using Discord to deliver the 
stolen information to its operators.The data its looking to steal includes 
login credentials, personal data, and financial information, as well as 
session details from different online apps, social media services, and gaming 
platforms. 

While the researchers spotted Exela in mid-September this year, analysis has 
shown that it was developed in May. Since then, it has grown and acquired new 
features, as well as its own Telegram channel. Chrome users at risk 

Exela will look to steal data from all of the major browsers on the market 
today, including Chrome, Edge, Brave, Opera, and Vivaldi. Furthermore, it 
will steal credit card information, session cookies, and other other data, as 
well as take screenshots. 

As for social media sessions, it can grab those from Instagram, Twitter, 
TikTok, and Reddit. And when it comes to gaming, users of the giant retail 
platform Steam and players of the popular Roblox are most vulnerable, it 
seems. 

Other details about the malware are not known at present. We dont know who 
its developers are, or who theyre trying to target exactly, although so far 
it's gamers and software developers who appear to be in its sights. 

We also dont know how the malware is being delivered to victims, nor how 
successful it is. Apparently, its being dropped via phishing pages and 
websites promoting free software. 

If you are worried about being infected, the best way to ensure security is 
to download software only from verified sources. Getting links via social 
media channels, email, or similar, is always a red flag. 

Furthermore, having antivirus software installed helps, as well as a 
firewall. Finally, many infostealers grab information stored in the browser, 
so it might not be a bad idea to store sensitive information in one of the 
best password manager solutions instead. 

 Via Tom's Guide More from TechRadar Pro Top data breaches and cyber attacks 
of 2022 Here's a list of the best firewalls These are the best endpoint 
protection services right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/exela-stealer-malware-uses-discord-to-s
teal-windows-users-data


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.