The service launches a new era of secure communication on the web.
Discord has announced a key security update aimed at combating the spread of malicious software through the platform. By the end of the year, Discord will switch to using temporary links for all files uploaded by users. The solution will be part of a broader effort to prevent Discord's CDN (content delivery network) from being used for hosting and distributing malware.
Representatives of Discord told BleepingComputer that the introduction of temporary URLs will increase the security of users by providing access control to potentially dangerous content. This means that links to files will now be valid for 24 hours, after which they will need to be updated.
The current Discord system allowed users to create permalinks to files that attackers used for long-term storage and distribution of malicious code. With the new rules, such permalinks will disappear, which will seriously complicate the activities of cybercriminals.
The changes will also affect developers who use the Discord API to integrate the service into their apps. They will face minimal changes, but the company assured that Discord representatives will work closely with the community to ensure that the transition goes as smoothly as possible.
According to the information security company Trellix, hackers used CDN Discord to distribute malware, including infostilers RedLine Stealer, Vidar, AgentTesla, designed to steal confidential information, including credentials and cryptocurrency. The files are disguised as harmless applications and are sent to the victim's computer from a trusted domain cdn.discordapp.com, which allows you to bypass antivirus protection.
The Discord community can expect more detailed information about upcoming changes in the coming weeks, as the company strives to communicate transparently about upcoming updates and their impact on the user experience.
Discord has announced a key security update aimed at combating the spread of malicious software through the platform. By the end of the year, Discord will switch to using temporary links for all files uploaded by users. The solution will be part of a broader effort to prevent Discord's CDN (content delivery network) from being used for hosting and distributing malware.
Representatives of Discord told BleepingComputer that the introduction of temporary URLs will increase the security of users by providing access control to potentially dangerous content. This means that links to files will now be valid for 24 hours, after which they will need to be updated.
The current Discord system allowed users to create permalinks to files that attackers used for long-term storage and distribution of malicious code. With the new rules, such permalinks will disappear, which will seriously complicate the activities of cybercriminals.
The changes will also affect developers who use the Discord API to integrate the service into their apps. They will face minimal changes, but the company assured that Discord representatives will work closely with the community to ensure that the transition goes as smoothly as possible.
According to the information security company Trellix, hackers used CDN Discord to distribute malware, including infostilers RedLine Stealer, Vidar, AgentTesla, designed to steal confidential information, including credentials and cryptocurrency. The files are disguised as harmless applications and are sent to the victim's computer from a trusted domain cdn.discordapp.com, which allows you to bypass antivirus protection.
The Discord community can expect more detailed information about upcoming changes in the coming weeks, as the company strives to communicate transparently about upcoming updates and their impact on the user experience.
