Drun Stealer: Discord, Telegram, Steam, Roblox Session Token Harvesting

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•1

Detects suspicious access attempts by non-native processes to sensitive application data such as Discord local state, Telegram tdata, Steam SSFN tokens, and Roblox session cookies. This activity could indicate an attempt to steal session tokens or credentials for unauthorized access.