Create custom Christmas gifts that sells with AI-powered personalization tools    Try now

Delete the archive and any extracted contents immediately.

If you executed the file, change your passwords immediately from a different, clean device , starting with your primary email and Discord accounts.

Once a user downloads and extracts "XQZ.rar", they usually find an .exe file. Upon execution, the following malicious activities often occur:

If you have downloaded this file, it is strongly advised to:

It specifically targets Discord installations to steal "tokens," allowing the attacker to bypass Two-Factor Authentication (2FA) and take over the user’s account to spread the malware further.