Hackers steal Discord accounts with RedTiger-based infostealer

A report describes how threat actors are weaponizing the open-source RedTiger red-team framework to produce a Windows info-stealer that harvests Discord account tokens, profile and payment data, browser-stored credentials and wallets, and game files; it injects JavaScript into Discord to capture API activity, uses PyInstaller-built binaries disguised as gaming/Discord tools, employs anti-analysis techniques, and exfiltrates stolen data via GoFile with results sent over Discord webhooks.