Skuld

Skuld is an information-stealing malware targeting Windows systems. Reported activity shows it is used to steal Discord-related data from infected PCs, including Discord tokens and user data. It has been observed in active distribution campaigns, including reporting that campaigns delivered Skuld alongside AsyncRAT, and it has also been referenced among open-source infostealers distributed in ClickFix-related activity. Public reporting notes overlaps between Skuld, ThunderKitty, and Kematian Stealer. Detection content indicates static YARA coverage exists for Skuld, with rules described as matching byte patterns associated with its data-theft functions. High-confidence indicators and characteristics directly mentioned in the source include its focus on Windows hosts, Discord data theft, exfiltration of Discord tokens and user information, and the existence of YARA detections for its theft functionality.