A threat actor known as LofyGang offers various tools and services for free, but users ultimately end up paying the price.
Another avenue for promoting the LofyGang’s malicious hacking tools is the group’s Discord server, which has been in operation since October of 2021. Users can join this Discord server to receive help using the tools. The server also features a Discord bot that can grant users a free subscription to Discord Nitro using stolen credit card credentials. However, in order to use the bot, users have to hand over their Discord account credentials, which LofyGang likely adds to the pile of credentials stolen by its malicious packages and tools. At the end of the day, Checkmarx’s
In addition to malicious npm packages, LofyGang distributes malicious hacking tools on GitHub. Similar to the npm packages, the hacking tools tend to be Discord-related. These tools also have malicious dependencies that steal account and credit card credentials. LofyGang promotes these tools on various platforms, including YouTube, where the group uploads tutorials for the tools.Another avenue for promoting the LofyGang’s malicious hacking tools is the group’s Discord server, which has been in operation since October of 2021. Users can join this Discord server to receive help using the tools.
