The franchise recently saw a resurgence in popularity with new games and an animated movie. Super Mario is an extremely popular video game franchise celebrated for its platforming gameplay, vibrant visuals, unforgettable characters, and captivating music. This incident highlights another reason TAs utilize game installers as a delivery mechanism: the powerful hardware commonly associated with gaming provides valuable computing power for mining cryptocurrencies. The malware files were found bundled with a legitimate installer file of super-mario-forever-v702e. Recently, CRIL identified a trojanized Super Mario Bros game installer that delivers multiple malicious components, including an XMR miner, SupremeBot mining client, and the Open-source Umbral stealer. Previously, Cyble Research and Intelligence Labs (CRIL) has discovered several malware campaigns that specifically target gamers and their game-related applications, including Enlisted, MSI Afterburner, FiveM Spoofer, and others. Malware distributed through game installers can be monetized through activities like stealing sensitive information, conducting ransomware attacks, and more.
The large file size and games’ complexity provide TAs opportunities to hide malware within them.
The social engineering tactics that TAs use exploit users’ trust and entice them to download and run malicious game installers. Threat Actors (TAs) use game installers to spread various malware because games have a wide user base, and users generally trust game installers as legitimate software. SupremeBot Pushes Umbral Stealer to Maximize Monetary Gain
0 kommentar(er)
