The official Valheim Discord server has been compromised and is currently locked down following a hacking incident on January 29, 2024. Iron Gate, the game’s developer, confirmed the attack and is working to restore the server and take out any harmful links and users.
Hackers accessed administrator accounts and used them to spread phishing links disguised as innocent downloads. Clicking these links reportedly installed malware called “Epsilon Stealer” onto users’ computers. This malware is designed to steal data and cookies from web browsers, potentially compromising personal information and online accounts.

The attempted attack went beyond phishing. Hackers also tried to disrupt the server further by deleting channels and banning users. Iron Gate quickly responded by locking down the server, preventing further damage and unauthorized access.
In a statement, Iron Gate urged Valheim players to be careful: “We strongly advise players not to click on any links or accept invites associated with the Valheim Discord server at this time. The current .gg/valheim invite link leads to a server controlled by the attackers.” Steam moderator Munin provided further details, stating that the breach began around 6:58 PM CET on January 29 and was contained within 10 minutes. Munin confirmed that administrator accounts were compromised, and a phishing link containing the malware was spread.
Iron Gate is in contact with Discord to regain control of the server and remove the malware. However, the full restoration process may take some time. In the meantime, do not click on any links or accept invites from the Valheim Discord server. If you’ve downloaded the “Windows Boot Manager.exe” file from the server, delete it immediately. This file is associated with the Epsilon Stealer malware. We’d also advise changing your passwords for any accounts you may have used on the Valheim Discord server.
It really doesn’t feel like the situation is under control. It is more like the hackers may know that their time is almost up and might just leave the server on their own. Take my advice, as someone who has downloaded a lot of viruses thanks to Limewire: only download files you know are safe. Also, generally, be suspicious of download links.
Comments