“Attackers, Trellix wrote, use the platform’s webhooks to pull data from victims’ computers and drop it into Discord channels run by the attackers.”
Yes exactly. The bridge logs into the discord server as a user. Then it mirrors all chats from your user in matrix to the discord.
Oh matrix, every user on the connected server gets a user whose name is their snowflake. Those virtual users post into the matrix server whatever their respective discord users posts.