Obfuscated Discord Injection JavaScript Payload Downloaded

Daniel Jeremiah@daniyyell

•updated Jun 21, 2026•0•0•7

Detects the creation or download of 'injection-obf.js', an obfuscated JavaScript payload associated with VVS Stealer for Discord injection. The rule captures details like source URL, referrer, and responsible process to aid in containment and scoping.