Key Takeaways (TL;DR): A fake VPN for Discord hides a trojan that steals passwords, intercepts messages, and can activate your webcam and microphone. The malware is distributed under the guise of Roblox cheats and game mods. A free auto-renewing subscription is available at /sub/happ/for-russia, and a private anti-DPI multi-key with white-list bypass is in the Telegram bot @yavpn_robot.

Security experts at F6 have uncovered a dangerous trojan disguised as a VPN client for Discord. The malware, which was analyzed in detail by the company's specialists, not only steals passwords and intercepts private messages but can also secretly activate your webcam and microphone. The attackers are distributing the fake VPN under the guise of cheat programs for Roblox and other popular games, luring victims with promises of free in-game currency or mods.

How the Trojan Works

Once installed, the malicious application performs a series of actions that turn your computer into a surveillance tool. The trojan uses a custom protocol to communicate with a remote command-and-control (C2) server, bypassing standard security measures. It can:

  • Capture keystrokes and steal saved passwords from browsers
  • Intercept and modify messages in Discord and other messengers
  • Activate the webcam and microphone without any user notification
  • Download additional payloads, making the infection persistent

The malware is particularly dangerous because it mimics a legitimate VPN interface, showing a fake connection status to reassure the victim. In reality, all traffic is being logged and exfiltrated.

Distribution Channels

The trojan is spread through phishing sites and social media groups that promise free Roblox Robux or Discord Nitro. Users are directed to download a setup file that claims to be a VPN for bypassing regional restrictions in Discord. Once executed, the trojan silently installs itself and begins its malicious activities.

What Users Should Do

To protect yourself, never download software from unofficial sources, especially if it promises free in-game currency or premium features. Always verify the authenticity of VPN clients and use only trusted providers. If you suspect your system is compromised, run a full antivirus scan and change all your passwords immediately.

For secure and private internet access, consider using a reliable anti-DPI solution. A free auto-renewing subscription is available at /sub/happ/for-russia, and a private multi-key with white-list bypass can be obtained from the Telegram bot @yavpn_robot.