Exela Stealer malware uses Discord to steal Windows users data

Cybersecurity
(Image credit: Altalex)

Cybersecurity researchers Cyble have recently uncovered a new malware strain attacking Windows users that is capable of stealing sensitive data from infected devices. 

The malware is called Exela, and is reportedly using Discord to deliver the stolen information to its operators. The data it’s looking to steal includes login credentials, personal data, and financial information, as well as session details from different online apps, social media services, and gaming platforms. 

While the researchers first spotted Exela in mid-September 2023, analysis has shown that it was developed in May. Since then, it has grown and acquired new features, as well as its own Telegram channel.

Chrome users at risk

Exela will look to steal data from all of the major browsers on the market today, including Chrome, Edge, Brave, Opera, and Vivaldi. Furthermore, it will steal credit card information, session cookies, and other other data, as well as take screenshots. 

As for social media sessions, it can grab those from Instagram, Twitter, TikTok, and Reddit. And when it comes to gaming, users of the giant retail platform Steam and players of the popular Roblox are most vulnerable, it seems. 

Other details about the malware are not known at present, so we don’t know who its developers are, or who they’re trying to target exactly, although so far it's gamers and software developers who appear to be in its sights. 

We also don’t know how the malware is being delivered to victims, nor how successful it is. Apparently, it’s being dropped via phishing pages and websites promoting free software. 

If you are worried about being infected, the best way to ensure security is to download software only from verified sources. Getting links via social media channels, email, or similar, is always a red flag. 

Furthermore, having antivirus software installed helps, as well as a firewall. Finally, many infostealers grab information stored in the browser, so it might not be a bad idea to store sensitive information in one of the best password manager solutions instead. 

Via Tom's Guide

More from TechRadar Pro

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
An American flag flying outside the US Capitol building against a blue sky
US military and defense contractors hit with Infostealer malware
Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.
Microsoft reveals over a million PCs hit by malvertising campaign
A hacker typing on a MacBook laptop with code on the screen.
This devious phishing site repurposes legitimate web elements like CAPTCHA pages for malware distribution
Hands typing on a keyboard surrounded by security icons
Infostealers on the rise: the latest concern for organizational defenses
A digital representation of a lock
Security experts are being targeted with fake malware discoveries
A concept image of someone typing on a computer. A red flashing danger sign is above the keyboard and nymbers and symbols also in glowing red surround it.
Microsoft Teams and other Windows tools hijacked to hack corporate networks
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring