Gamers Warned About New WebRAT Malware Distributed via Discord and Roblox

Cybersecurity experts have issued a warning regarding a stealthy malware dubbed WebRAT targeting Windows users, particularly focusing on gamers and online community participants seeking unofficial modifications.

Distribution Vectors and Disguise

Attackers set up dedicated web resources promoting unauthorized software downloads. These include fake tools like Discord Zapret, advertised for accessing the messaging app, and Xeno, an unofficial script executor for Roblox. Users are routinely manipulated into bypassing built-in antivirus warnings during installation.

Capabilities and Impact

WebRAT combines remote access Trojan functionalities with advanced spyware features. The software is capable of harvesting login credentials, cookies, and session tokens from platforms such as Steam, Telegram, and Discord. Furthermore, it logs keystrokes, monitors the clipboard to intercept crypto-wallet data, and can record audio and video via the infected device's microphone and webcam.

Security specialists emphasize the importance of heeding system warnings and avoiding unverified download portals.

If an infection is suspected, experts recommend immediately disconnecting the computer from the network, running a comprehensive anti-malware scan, and changing critical account passwords from a clean device.