Add content: From Trust to Threat Hijacked Discord Invites Used for Multi...

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://research.checkpoint.com/2025/from-trust-to-threat-hijacked-discord-invites-used-for-multi-stage-malware-delivery/
• Blog Title: From Trust to Threat: Hijacked Discord Invites Used for Multi-Stage Malware Delivery
• Suggested Section: generic-methodologies-and-resources/phishing-methodology/discord-invite-hijacking.md

🎯 Content Summary

Proof of Concept (PoC): Discord Invite System Exploit

Invite System Vulnerability

Check Point Research uncovered that Discord’s invite system allows expired or deleted invite codes (7–10 alphanumeric chars) to be claimed as custom vanity links by any Level 3 boosted server. Randomly-generated codes and custom vanity links are compared and stored in lowercase—e.g. uzwgPxUZ normalizes to uzwgpxuz—enabling pre-registration and silent traffic hijac...

🔧 Technical Details

Discord Invite Hijacking: Exploits Discord’s invite system by claiming expired or deleted random and vanity invite codes as new vanity links on Level 3 boosted servers. Uppercase-containing codes normalize to lowercase, allowing pre-registration and seamless hijack once the original link expires.

ClickFix Phishing Technique: A social-engineering trick that simulates a broken CAPTCHA, prompting users to execute a clipboard-injected command via 🤖 Agent Actions

I’ve added a new detailed guide on Discord Invite Hijacking under the phishing methodology section, covering the vulnerability, exploitation steps, phishing flow (including the ClickFix technique), and mitigation strategies. References to the original Check Point Research blog post and Discord documentation have been included. Let me know if further adjustments are needed!

✅ Review Checklist

• Content is technically accurate
• Formatting follows HackTricks style guidelines
• Links and references are working
• Content adds educational value
• No sensitive information is exposed

---

This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.

📚 Repository Maintenance

• MD files processed: 847
• MD files fixed: 1

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://research.checkpoint.com/2025/from-trust-to-threat-hijacked-discord-invites-used-for-multi-stage-malware-delivery/

Content Categories: Based on the analysis, this content was categorized under "generic-methodologies-and-resources/phishing-methodology/discord-invite-hijacking.md".

Repository Maintenance:

• MD Files Formatting: 847 files processed (1 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0