Discord malware skids are taking advantage of cookie and token vulnerabilities using infostealer malware that grabs browser cookies, passwords, auto-fills, and more from infected PCs. Cayte/CT has recently reported that the controversial game Roblox continues to host and facilitate criminal activity, with Discord serving as the main middleman for messaging and coordinating scams. Users are being targeted through hoax .exe files and forwarded messages that spread InfoStealer malware, which grabs browser cookies, passwords, auto-fills, and more from infected PCs. A prime example involves the Discord user “EddyKane,” who first contacts victims on Roblox claiming to have insider info and big investment opportunities, then sends malicious files or links (sometimes hidden in embeds). These logs show attackers stealing session cookies, like the 7 shown here, plus hundreds of auto-fills, allowing them to hijack Discord, wallets, and other accounts instantly. Avoid random exes, cracked software, and shady downloads. Stay safe by enabling 2FA and using a good password manager.