VS Code Phishing - Discord Webhook OTP Exfiltration

Ibrahim Saud@tektrix

•updated Jun 21, 2026•0•0•3

Identifies network communication initiated by Microsoft Word (WINWORD.EXE) to Discord webhooks, which could indicate an attempt to exfiltrate stolen information, such as One-Time Passwords (OTPs), often associated with phishing campaigns.