Ctrl+Alt+Deceit - The Game Jam Scam
summary
A purported indie game link installs a Discord token stealer — a BBY stealer variant — which drops into startup, harvests OS and browser credentials, reads crypto wallets, hijacks the clipboard and uses the active Discord token to message 8 contacts (two respond, one clicks). Recovery requires immediate password changes via a password manager, nuking active sessions, and a full system reset of the exposed machine; the incident underlines phishing via community channels and the concrete mechanics of token/crypto theft.
AI-written summary · about
chapters (8)
- 0:00The phishing lure
- 1:53Context and vulnerability
- 3:25Executing the malicious file
- 5:47Discovery of the breach
- 6:23Incident response
- 7:55Outreach and remediation
- 8:33Malware analysis
- 10:03Lessons learned
related talks
40mDiscord, Generation Z’s Hacking University
01h 01mSomething Something Cyber
40mStealing User's Identity
35mBreaking the Chain: An Attacker's Perspective on Supply Chain Vulnerabilities and Flaws
52mFlying Under the Radar - New Security Evasion Techniques
49mInside the Information Stealer Ecosystem: From Compromise...
46mThe Art of Cyber Espionage: Unleashing the Power of SCADA and ICS Hacking
59mCrypto Heist: The Aftermath of a Government Website Cryptojacking Attack