New sophisticated discord scam that bypasses 2fa

[libert19]

Sounds complicated 

https://mobile.twitter.com/littlelemonsnft/status/1477923368053706755

[dansus021]

hacked because they do the screen share, it same that u give username and password and never to do that for your own safety.

its been a 2 year i got some new people that DM and talk about investment advice and get rich from it. neither telegram or discord

i dont know why there is so much scammer nowadays  and speak of the devil i just block 3 people this day scammer that give me free nft through DM be safe Yall

[Pmalek]

A few things went wrong here.
First of all, the person got banned and he received a message from someone saying that he got banned. The person pretending to be an admin said if he wants his account reinstated, he needs to do as he says. That should trigger your first alarm. If you get banned somewhere, you are supposed to be the one finding and contacting the responsible people and getting some answers, not the other way around.

After that he agreed to a screen share. How is that going to prove your innocence?
Don't share private information with anyone, don't screen share, don't allow remote access to your computer, etc.   

[Findingnemo]

But how a mod can be banned in a discord server by random member? To do this they need admin status right? Or am I missing something.

Scammers are evolving and will evolve as well so keep updating from our side is also important to avoid such kind of new tricks.

[vv181]

But how a mod can be banned in a discord server by random member? To do this they need admin status right? Or am I missing something.

No, they are not. There is two Discord server involved to run the attack, and the scammer does not have any admin status on both.

So, the scammer finds a victim(targeted admin/founder) in server A, and then they try to find if those victims have also joined some discord server that the scammer is also part of it. On server B who the victim and the scammers are both of a member, the scammer is accusing the victim of is a known scammer, as a result, the mod on server B is banning the victim. Which resulted why the victim believe the one who sends a DM is a real mod since he/she got banned.


I tried to play around with inspect element on the Discord web app, and now it shows:



I don't know when was Discord started to show that message, but if they just recently show it because of the type of scam on OP, at least there is an effort to inform their users about the danger of it.

[TribalBob]

in the past few days I have 4 people I blocked coming to discord asking to click on a link by forcing without thinking I blocked
I'm surprised that there are many ways for scammers to launch ways to deceive people, we as account owners must be careful and store our data safely and tightly

[Stalker22]

A few things went wrong here.
First of all, the person got banned and he received a message from someone saying that he got banned. The person pretending to be an admin said if he wants his account reinstated, he needs to do as he says. That should trigger your first alarm. If you get banned somewhere, you are supposed to be the one finding and contacting the responsible people and getting some answers, not the other way around.

After that he agreed to a screen share. How is that going to prove your innocence?
Don't share private information with anyone, don't screen share, don't allow remote access to your computer, etc.   

That is right. I can't tell you how many times I have been on a call and the person on the other end has said, "hey, i can fix that for you if you give me access to your computer!" This is a classic sign of a scam. They are trying to steal your money, or anything of value you may have.
The most important thing you can do to protect yourself from a online scam is to NOT GIVE THEM ANYTHING. 

[aysg76]

A few things went wrong here.
First of all, the person got banned and he received a message from someone saying that he got banned. The person pretending to be an admin said if he wants his account reinstated, he needs to do as he says. That should trigger your first alarm. If you get banned somewhere, you are supposed to be the one finding and contacting the responsible people and getting some answers, not the other way around.

After that he agreed to a screen share. How is that going to prove your innocence?
Don't share private information with anyone, don't screen share, don't allow remote access to your computer, etc.   

This is the sign that how should we not react under such circumstances and screen sharing should have alarmed them but they went on further with it and then fell victim for the scam.If the person ask you for the privacy of your account it should trigger you a little bit but we can say at that time the only thing that can safeguard us is our awareness and keeping control of your emotional senses.

The discord is the most used platform these days especially for the NFT trends and have very secured network of servers but there are tons of hackers and bot attack happening that can cause major loss to you but still you compromised with your security is your fault.

Here is nice guide which explains these discord scams in detail and how to be safe from them in the time : Discord scams

[OcTradism]

- Moderators, admins never send private messages first.
- They don't ask for password, 2FA, SMS code or make deposit first.
If anyone sends you a private message and ask for such information, make such request, they are scammers. I am sure about that.

About passwords, 2FA, keys, etc. many people do backups but in inaccurate ways. They make backups in screenshots, on clould, in email, on social media. They think they are safe by doing so but in case, their accounts (email, cloud, social media, etc) get hacked, their backups will be leaked as well.

[_act_]

One thing I can never do is to screen share, this is one of the reasons some wallets and exchanges do not allow people to screen share until they go to settings to enable screen share, it is not a good idea. I remember a time in the past when some blockchain.com users said their wallet was hacked through screen share. The exchange I am using now can be used to sign in into another web browser with only screen sharing a QR code, screen sharing is very dangerous.