Click the Discord link on Metis, and you will land in a server with 630 members, the Metis branding, and a fake guildpass.app. None of it belongs to Metis
We found the server last month while checking out Metis. The invite that Metis still points its community to had either been compromised or hasn't been claimed, and someone claimed it. They rebuilt the server to look official and set up a fake "Guildpass" bot. New members are asked to verify their identity through an external website to have access to the server; meanwhile, the verification is done through running a command on your computer
We've tried to reach Metis for a month through LinkedIn and X. We haven't heard back, and the server is still alive. If you’ve joined a Metis Discord recently and ran anything you were asked to paste, treat that machine as compromised. Here’s what the attack does and what to do next
How we found it
We joined the server through the Discord link on Metis. At first, nothing looked unusual. Most Discord servers ask new members to verify they’re human before they can see any channels, and the bot waiting for us had the same name, avatar, and layout as the real GuildPass bot.
The first red flag came when we clicked to verify. The bot sent us to guildpass[.]one, not the real guildpass.app. One changed domain extension, easy to miss if you aren’t looking for it.
We kept going. Instead of a CAPTCHA, the page told us to complete verification by pasting a command into Windows Command Prompt. No legitimate verification service asks you to do that. At that point, it was clear: this was a ClickFix attack, built to get members to install malware on their own machines
The attack, step by step
Upon checking out the community section on Metis's website, you would find all their social media and the platforms where Metis community members can discuss Metis and everything related
However, as we discussed before, it seems like either their Discord server was compromised or the handle to their Discord server was never claimed in the first place, which the attacker noticed in this case and used this opportunity to launch a phishing attack against Metis community members
When you finally reach Metis's Discord server, it seems like any other Discord server out there with an anti-bot protection that only allows verified members to chat and use the server, and that verification is done through GuildPass, which is a known verification bot many other Discord servers use
Yet the moment you enter the fake GuildPass bot verification, Everything mostly looks normal until you click on the verification step
By then, instead of a normal CAPTCHA like any other verification flow, it asks people to verify through their CMD on Windows, and here's how the attacker's flow works
- The moment the user clicks on the Verify button to enter the screen above, a malicious command is added to their clipboard
- The attacker provides instructions to run their malware loader through the fake Guildpass website, and users are instructed to run the malware loader on their computers
- The malware loader compromises the system and starts dropping more malware related to the same attacker on the victim's machine
What the command actually does
We conducted a full analysis on the malware and everything it does in a seperate technical blog, You can read it at https://xxx
As an overview of what the command does, it first starts with an obfuscated loader written in VBScript that later loads another loader, and the second loader installs the malware on your system
The moment the malware reaches your system, it weakens Windows Defender by excluding the malware directories from Windows Real-time protection
Once the setup is already over, the malware infects your system with 3 different malware from various sources
- An infostealer that steals your browser's saved passwords, cookies, cards, and history; it also collects your Discord tokens, backup codes, crypto wallets, Wi-Fi passwords, and documents whose names mention passwords
- Another instance of the malware checks every 5 minutes if the malware has any updates available so it can reinstall it on your machine; it also checks if you've removed or stopped the malware so it fetches it again and installs it
- A RAT that takes full control over your computer
Ran the command? Here's what to do
With all that said, if you fell victim to this attack, treat your machine as compromised and take those actions immediately
- Disconnect your machine from the internet immediately
- From another trusted machine that you know isn't infected, start changing your passwords
- Back up your essential personal documents carefully, then wipe the infected Windows installation from your machine, or seek professional help for malware removal
Why did it work?
The compromised Metis Discord server did most of the work for the attacker; it convinced people to trust it. They didn't reach the server through a random online source; instead, it was through the official website of Metis
Disclosure Timeline
October 6, 2026: Riven Labs identifies a malicious Discord server reachable through the official invite link on Metis's website, using a fake GuildPass bot to deliver malware. That same day, we contact Metis team members directly through LinkedIn and X to report the hijacked invite and the active campaign.
October 7, 2026: We report the server to Discord Trust & Safety and the impersonating bot to GuildPass.
November 13, 2026: More than a month after first contact, Metis has not responded, and the server remains active with 630 members. We publish this report to warn the community
Recommendations
For projects and community managers
Audit every link that points to your community. Your Discord invite probably lives in more places than you remember: your website, docs, X bio, Linktree, GitHub, Medium posts, old announcements. Check all of them on a schedule, not just when something breaks. An invite you stopped thinking about is one an attacker can start using.
Know how your invite can be lost. Vanity URLs depend on your server’s boost level. If boosts lapse, the URL can be released and claimed by anyone. Standard invites can expire or be deleted. Whatever you use, know what would make it stop being yours.
Never leave an old link pointing nowhere. If you move to a new server or shut one down, update every reference to it at the same time. A dead invite isn’t harmless. It’s an opening.
Make sure someone is listening. Publish a security contact on your website, ideally a dedicated email and a security.txt file, and make sure a real person reads it. In this case, a month of reports went unanswered while the attack kept running.
For Discord users
No verification bot will ever ask you to run a command. If a server asks you to open Command Prompt, PowerShell, Terminal, or the Run dialog to “verify,” leave. That one rule would have stopped this entire attack.
Check where verification takes you. Before you interact with any verification page, read the domain. guildpass.app and guildpass[.]one look almost identical at a glance, and that’s the point.
Don’t trust a link because of where you found it. An official website can still point to a server the project no longer controls. If something about a server feels off, confirm it through the project’s verified X account or another channel before you go further
Nobody broke into Metis to make this attack work. Nothing was exploited and no password was stolen. Someone claimed a link that the project had stopped watching, and Metis’s own website started sending its community straight to them. That’s the part that should worry every project with a public presence: your attack surface includes every link you’ve ever published, including the ones you’ve forgotten about.
At Riven Labs, we look for exactly these gaps, the ones that sit outside your infrastructure but still carry your name. If you want to know what an attacker could claim from your public footprint today, get in touch.
