State-sponsored hacking operations have begun leveraging Discord to facilitate cyberattacks against critical infrastructure organizations as evidenced by the presence of an artifact aimed at such entities in Ukraine discovered in the instant messaging and VoIP social platform, reports The Hacker News. Trellix researchers discovered that the artifact, a Microsoft OneNote file sent through an email address impersonating the nonprofit organization Dobro that used donations to Ukrainian soldiers as lures, enabled the execution of a Visual Basic Script and a pair of PowerShell scripts that exploit a Discord webhook for system metadata exfiltration.

Source: SC Magazine