However, in order to use the bot, users have to hand over their Discord account credentials, which LofyGang likely adds to the pile of credentials stolen by its malicious packages and tools.