Came across an interesting campaign recently targeting Discord users through a fake browser-based UNO card game (unoplay.me). Thought I'd share a quick breakdown of how it works and where the actor completely messed up their OPSEC.

Timeline

Looking at the infrastructure timestamps, the operation was stood up and deployed over the weekend of September 6–7, 2026:

• September 6 (~22:00–23:40 UTC): The actor deployed the site to Hostinger, set up the backend database, compiled the UnoApp.exe build, and ran initial tests with co-conspirators.
• September 7 (05:00 UTC onward): The campaign went fully live. The actor began distributing invite links across Discord/gaming channels to lure victims into the lobbies.

The Lure

Victims join a working web lobby to play UNO. When the host hits "Start Game", the web UI pops up saying the match only runs in the desktop client and tells them to download UnoApp.exe (~119MB, hosted on Dropbox). The actor also uses fake female personas in chat to convince people that voice chat only works in the desktop app, and specifically checks if victims are on Windows before starting.

The Binary

The file was 0/70 on VirusTotal when I first checked.

• Packaged as an NSIS installer wrapping an Electron build.
• Instead of plain JS in app.asar, the core logic is compiled directly to V8 bytecode (app.protected.jsc) via Bytenode to dodge static heuristic scanners.
• All internal strings were encrypted with AES-256-CBC. Once decrypted, it turned out to be a custom build of HADES Infostealer / RAT.
• Capabilities: Chrome App-Bound encryption bypass via DPAPI/LSASS token duplication, browser credential theft, crypto wallet extraction, Discord client patching (blinds the login QR code to force manual 2FA entry), and a ransomware lockscreen command (kilit.png).
• Exfiltrates stolen bundles directly to a hardcoded Telegram ID (8690153935) and a C2 domain (hellodcuser.com).

The OPSEC Failure

The funniest part was the web lobby infrastructure. The threat actor hooked their site up to a public Supabase instance with unauthenticated tables.

I dumped the database and found 53 rooms, 134 members, and all their raw chat logs. In one of the private test rooms, the operator logged in under his real name ("Türkay"), chatting with a co-conspirator and literally writing: "this is our anonymous place... we will transfer the stolen data from here". Out of 44 unique users who entered the lobbies, around 40 were pushed to download the payload.

I put together the full writeup with the extracted AES key, hashes, C2 indicators, and chat transcripts on my site:

https://walliez.xyz/unoplay

(All abuse reports have already been submitted to Dropbox, Supabase, Hostinger, and national CERT).

how could i get my account back i really need it back because it has so many things ive contacted them in app but i cant type did anyone get unbanned from this can anyone help me pleaseee

Help my account got hacked I did everything and nothing has worked i need help everyone of my friends are at risk and other people to I need help discord help me my things and friends are at risk if not I'ma jus have to call the discord headquarters myself cuz I don't want other people to go through this jus help me

I want to know how to determine whether the server I am participating is private server or not.

+ I am in few community servers, and when I click the "community server" banner, some show that "anyone can participate in this server" and some show "only ones who have invite code can participate". Does this mean the latter is a private server & the former is a public server? Or are every community servers a public one?

Basically the title. I've heard small things about CyberLeek and GTA6, but believe me - im no huge GTA fan. I've never googled CyberLeek or had ANY conversations or dealings with anyone about anything to do with rockstar on discord. I play CoD and some MMOs and thats about it - nothing from rockstar.

So... why the everliving fuck have I just been added (not JUST invited, but fully added without asking) to a server called 'ROCKSTAR CAN ARREST ME'. I have never ever been added to a server randomly without asking. How did this happen? Did anyone else have this happen? Apparently the server has 800,000 people in... so if it was a discord glitch/hack that hit everyone, surely it'd be millions? Im so uncertain how this even happened

Again, ive asked for no discord invites to do with anything about GTA6, i dont even take an interest in their games. Can someone help explain this, or if its happened to anyone else? I've immediately left the server, of course.

Thanks in advance. Im a bit shaken - this has never happened to be before for any server for which I didnt ask for an invite.

They've wrongly banned me and refused my appeal because they didn't let me give them any context about the situation. Now they spam my support requests with bots and mark them as solved while telling me to "appeal via the app" Which they of coruse don't let me do as it's stuck on "You've requested a review for this violation" even after days of its rejection. How can I get a human and not a damn clanker made for spamming to review my issue before deciding?

For like two years or so I've had an account that I've wanted to delete so i can make an actual account to use, but it doesn't let me sign in when it asks me to do the phone verification, I cant sign into discord support to get help to delete the account while also not signed into normal discord, and I've been trying for over a year and a half and i get pissed off each time i try to fix this.
What the hell am i supposed to do, i want to use discord but i cant sign in or make a new account

Someone got into my account and changed the email to something that doesn't even exist. I never got a notification, even though I had 2FA on. Now I can't log in or reset anything.

I sent support proof it's mine — old purchase receipt, a ticket I filed months ago about my Gmail being hacked — and they just closed the ticket and said they can't help.

This account has years of my life on it. If you've been through this exact thing and actually got your account back, please tell me what worked. I'll take any advice at this point.

My dad had sent me money for something in a game and like a week ago my friend gave me a free TWO weeks of nitro. But when I went to buy said thing instead discord charged me for nitro. And earlier I sent a refund request, I said what happened and apparently it’s “un eligible” for a refund when the reasons that it might be un eligible don’t apply to it at all. I’m pissed goodbye

I have been in contact with discord support all day talking with "Nelly" and I just need help with my phone number being removed from my old account so i can reactivate it onto my new account. This is all due to my old account getting hacked and Discord Support not able to help me recover the account due to the email associated with it being deactivated.

i joined a server that my friend invited me to, had bad violence in hidden channels that u needed roles to see, i didn't have those roles, now the server is banned and so is my 2020 account, this is genuinely bullshit ive tried appealing everywhere and discord has ignored me and all i got is clyde AI replies, this fucking app sucks i had No violations for so many years and i get permanently suspended randomly from a server i didn't know was banned? Fucking hell

Thats the last message i got when I contacted discord abt my account
And i even try to mention its an early supporter so they feel sad
What should i do? Give up ?

Recently my account got suspended for child safety i didnt do anything even what to do now

Around 4 days ago I was in an item trading server for a game I play so I was messaging people and talking about trades. I messaged multiple people in a short amount of time which is why i think discord put a rate limit on my account making me unable to verify my phone number and use my account, but other than that I was also using a browser vpn so it made me do a human check eveytime I wanted to message someone, so that might have also caused something. I've contacted discord support and they've explained to me how I just have to wait it out, but after checking out the help page I saw that discord says it should go away after 24-48 hours and if it doesn't you need to contact support (I did that but didn't get anywhere)

Hello, Hope this message founds you well! Maybe this post is not relevant to this community, but I have been searching for days for a guide regarding how to create, manage and sustain a simple economy on your Discord server for users to engage with.

Didn't find anything of help, so I am resorting to asking directly on forums. Do you guys know a good old post already touching this topic? Any guide or video on the internet?

Thank you very much in advance!

Hi all,
I created a server and rearranged the channels inside, now there is no notification anymore if ppl join.
When trying to find how to enable it again on a certain channel, I am being lead to a 4 year old article in the discord help center that sends me to "Server Settings" and then "Overview" which doesn't exist anymore in the current "Server Settings".
I was not able to find this option anywhere. Can we not set this channel anymore? Or am I missing something? Neither "Server Settings" nor "Channel Settings" of the specific channel could help me.
Ty in advance :D

First, my discord account was hacked by the hacker. Thankfully, my friend told me about the suspicious message at the earliest and I was able to recover my discord account, then I changed my discord password from my phone and did some research about this. I found out that this was an infostealer installed after downloading a mod for a game (I am an idiot for trusting some unknown website) , then I quickly changed all my passwords and added recovery methods. Unfortunately I was not able to recover my steam account :< , I have sent a forum for support.

The fortunate thing is that I haven't done any billing related things on my windows. And I mostly work on my linux (I've dual booted my pc with windows and Linux) and I've checked if my linux got corrupted by the malware but it doesn't seems so after checking with some commands.

I had set a window restore point some days ago. Should I do system restore with the restore point and windows defender offline scan or should I reinstall windows

And is reinstalling linux also necessary

Edit: sorry for the title, it should be 'I got hacked and was able to recover my account '

If i am participating in server A and B and I gain a server tag from server B,

can members of server A or my friends find out what server i got the tag from clicking my server tag?

If so, i'd like to be informed a way to make it impossible

Good afternoon,

Long story but i got hacked with the famous javascript hack. My friend got hacked first and then i got hacked. I recovered most of my accounts except for my discord and the email linked to this discord. The support keeps saying they cant help me cause i need to make a ticket with the email that is linked to that account. But this simply not possible. Also the hacker added 2FA to this account so i cant recover it in anyway. Are there solutions for this?

Like the title says I gifted them something from the wishlist and got the message and the billing email and receipt and such and neither of us got it we both checked the gift inventory and nothing in there

Just got banned from the only discord I managed to get into because I showed off one of my katanas and my foot was in frame. It just seems like it's so easy to get banned these days by a powertripping mod and the only communities that don't ban people are filled with bigots.

I'm looking for communities that aren't too large.