Malware Distribution Uses Discord CDN

This Zscaler ThreatLabZ report documents active Discord-based malware campaigns that lure gamers with pirated/replicated game software hosted on cdn.discordapp.com; analyzed payloads include Epsilon ransomware (file encryption and shadow-copy deletion), Redline stealer (credential and wallet theft), XMRig miner (cryptomining and game/process killing), and multiple Discord token stealers (TroubleGrabber). The report provides technical behavior, persistence and C2 details, MITRE ATT&CK mappings, and a table of IOCs (file hashes and malicious Discord CDN URLs).