{"id":1216,"date":"2021-03-06T18:16:40","date_gmt":"2021-03-06T12:46:40","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=1216"},"modified":"2021-06-07T11:02:59","modified_gmt":"2021-06-07T05:32:59","slug":"new-ransomware-that-targeted-users-who-join-discord-server","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/","title":{"rendered":"New Ransomware that Targeted Users who Join Discord Server!"},"content":{"rendered":"\n<p><p style=\"text-align: justify\">New ransomware detected that is named HOG which encrypts user&#8217;s data of those who are using the Discord server.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">According to the investigation, the security researcher identified that in-development decryptor the HOG Ransomware is encrypting the victim&#8217;s data who are connected to Discord server that decrypt their files.<\/p><\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Working of HOG Ransomware<\/strong><\/h2>\n\n\n\n<p><p style=\"text-align: justify\">However, the experts have also discovered the component named as VirusTotal which is executed and check all the list of Discord server that exists and starts encrypting the victim&#8217;s files. As the ransomware starts encrypting the files it will display as .hog extension, shown below.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1020\" height=\"647\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image1.jpg\" alt=\"New Ransomware that Targeted Users who Join Discord Server!\" class=\"wp-image-1218\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image1.jpg 1020w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image1-300x190.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image1-768x487.jpg 768w\" sizes=\"(max-width: 1020px) 100vw, 1020px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify\">The Hog Ransomware Decryptor will elaborate the victims that explained what happened to the victims and then it will force them to enter the token used in the Discord server. After that, the tokens authorize the ransomware to verify Discord API as the user and also check about the users who are joined their servers.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"495\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image2-1024x495.jpg\" alt=\"New Ransomware that Targeted Users who Join Discord Server!\" class=\"wp-image-1219\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image2-1024x495.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image2-300x145.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image2-768x371.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image2.jpg 1215w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n\n<p><p style=\"text-align: justify\">In case the users join the server created by the hackers or the server that doesn\u2019t exist, then the ransomware starts working and decrypt the user&#8217;s data with the help of a static key that was already embedded in the ransomware.<\/p><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img decoding=\"async\" loading=\"lazy\" width=\"1024\" height=\"495\" src=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image4-1024x495.jpg\" alt=\"New Ransomware that Targeted Users who Join Discord Server!\" class=\"wp-image-1220\" srcset=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image4-1024x495.jpg 1024w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image4-300x145.jpg 300w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image4-768x371.jpg 768w, https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-image4.jpg 1215w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Summering Up<\/strong><\/h2>\n\n\n\n<p><p style=\"text-align: justify\">Therefore this ransomware is called in-development ransomware that shows how the hackers have used Discord for other malicious activities. Apart from this another ransomware we detected named Humble, which is responsible for posting the details of users to the hacker using the Discord server.<\/p><\/p>\n\n\n\n<p><p style=\"text-align: justify\">Discord server is also used by delivering multiple malware or stealing data, the hackers modified the server and it is very dangerous for the organization who are connected and working on the server. The hackers also bypass the security tools and monitor Discord traffic or other behavior of the users.<\/p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New ransomware detected that is named HOG which encrypts user&#8217;s data of those who are using the Discord server. According to the investigation, the security researcher identified that in-development decryptor the HOG Ransomware is encrypting the victim&#8217;s data who are connected to Discord server that decrypt their files. Working of HOG Ransomware However, the experts [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1223,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.11 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"New ransomware detected that is named HOG which encrypts user&#8217;s data of those who are using the Discord server. According to the investigation, the security researcher identified that in-development decryptor the HOG Ransomware is encrypting the victim&#8217;s data who are connected to Discord server that decrypt their files. Working of HOG Ransomware However, the experts [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-06T12:46:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-07T05:32:59+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-featured.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"New Ransomware that Targeted Users who Join Discord Server!\",\"datePublished\":\"2021-03-06T12:46:40+00:00\",\"dateModified\":\"2021-06-07T05:32:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\"},\"wordCount\":299,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Breaches\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\",\"url\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\",\"name\":\"New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-03-06T12:46:40+00:00\",\"dateModified\":\"2021-06-07T05:32:59+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"New Ransomware that Targeted Users who Join Discord Server!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/","og_locale":"en_US","og_type":"article","og_title":"New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited","og_description":"New ransomware detected that is named HOG which encrypts user&#8217;s data of those who are using the Discord server. According to the investigation, the security researcher identified that in-development decryptor the HOG Ransomware is encrypting the victim&#8217;s data who are connected to Discord server that decrypt their files. Working of HOG Ransomware However, the experts [&hellip;]","og_url":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-03-06T12:46:40+00:00","article_modified_time":"2021-06-07T05:32:59+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/03\/hog-ransomware-files-encryption-featured.jpg","type":"image\/jpeg"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"New Ransomware that Targeted Users who Join Discord Server!","datePublished":"2021-03-06T12:46:40+00:00","dateModified":"2021-06-07T05:32:59+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/"},"wordCount":299,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Breaches"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/","url":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/","name":"New Ransomware that Targeted Users who Join Discord Server! - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-03-06T12:46:40+00:00","dateModified":"2021-06-07T05:32:59+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/new-ransomware-that-targeted-users-who-join-discord-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"New Ransomware that Targeted Users who Join Discord Server!"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1216"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=1216"}],"version-history":[{"count":2,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1216\/revisions"}],"predecessor-version":[{"id":1222,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/1216\/revisions\/1222"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/1223"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=1216"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=1216"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=1216"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}