The new malware exploits a weakness in Discord’s invitation system to deliver an information stealer known as Skuld and the AsyncRAT remote access trojan.

A discovered exploit is reported to be repurposing real Discord invites to steal users' data, passwords, and even crypto wallets.

Hackers are hijacking expired or deleted Discord invite links to redirect users to malicious sites that deliver remote access trojans and information-stealing malware.