EchoCreep Uploads a Local File as a Message Attachment

Daniel Jeremiah@daniyyell

•updated Jun 20, 2026•0•0•3

Detects a non-Discord process preparing multipart attachment data from a local path for upload through a messaging API. This behavior is indicative of malware like EchoCreep exfiltrating data via messaging platforms.