Security Alert: Discord QR code.

Hey everyone,

There is currently a huge security problem with discord. The new system where you can use a qr code to login on desktop bypasses 2fa.

So never scan a qr code with the discord app outside of the discord website!

I guess they will fix this soon enough, but people are already abusing this.

Appreciate the heads up, Tom. I hadn't heard about this before you mentioned it

Thanks man havent heard of it either...

I mean, if you need a phone to scan the QR code, isn't it technically 2FA? Since you're using something that's considered a 2nd factor device.

You also need additional confirmation on the user's part after scanning the QR code in order for the hijacker to get access to your account.

But nevertheless, people still fall for these phishing schemes, so it's always good to know that you shouldn't scan QR codes you don't trust.