[RE/DFIR] My Discord and Instagram Got Hijacked for the MrBeast Scam, So I Took the Malware Apart

No cracked .exe, no fake CAPTCHA. A fake AI coding extension for VS Code stole my sessions on October 11, and the accounts were only abused 8 days later. The timeline, what it stole, and a full reverse-engineering breakdown of all three stages.

ReverseEngineeringDFIRMalwareAnalysisInfostealerCyberSecurity
[RE/DFIR] My Discord and Instagram Got Hijacked for the MrBeast Scam, So I Took the Malware Apart
No cracked .exe, no fake CAPTCHA. A fake AI coding extension for VS Code stole my sessions on October 11, and the accounts were only abused 8 days later. The timeline, what it stole, and a full reverse-engineering breakdown of all three stages.

← All posts

Post
Source