Be very careful when downloading these games online - they could be malware

Magnifying glass enlarging the word 'malware' in computer machine code
(Image credit: Shutterstock)

Hackers are distributing a dangerous infostealer and adware by passing it off as cracked versions of popular video games, experts have warned. 

Cybersecurity researchers from AhnLab claim this latest campaign is particularly unique due to the file type the hackers chose to bypass antivirus programs and other cybersecurity protections. 

The team reported spotted a number of malicious websites advertising cracked versions of popular games such as Elden Ring, ROBLOX, Dark Souls 3, Red Dead Redemption 2, Call of Duty, and many others. However, people downloading the executive files from these locations are in for a surprise - instead of the actual game, all they’ll get is ChromeLoader, a known malware capable of doing all sorts of nasties. Among its features is the ability to show ads to users, steal the credentials stored in the browser, as well as other saved data.

VHD files

Usually, in campaigns such as this one, the hackers would pack the malware in an ISO file - a virtual drive file that the victims can “mount” on a virtual drive. Once run, the file would show as an additional removable storage drive, from which they’d be able to install the executable (in this case, the malware). 

This time around, however, instead of the ISO, the hackers have opted for VHD files. Just like an ISO file, a VHD can be mounted on a Windows system with ease, and also works well with most virtualization software. 

In the meantime, the websites hosting the malware have been pulled offline, the researchers said.

As usual, to keep safe from threats such as this one, users are advised to steer clear of torrent websites and other unofficial download sources. Pirated software, cracks, key generators and activators are one of the most popular attack vectors threat actors use to distribute all kinds of malware and viruses.

Having an strong antivirus solution also helps.

Via: BleepingComputer

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A white padlock on a dark digital background.
GitHub is hiding malware disguised as games, legitimate software
malware
Valve advises full system reset if you've downloaded this Steam game containing malware
Representational image of a cybercriminal
Criminals are spreading malware disguised as DeepSeek AI
A digital representation of a lock
Security experts are being targeted with fake malware discoveries
Trojan
Hackers hide malware into website images to go unnoticed
AI business data center
Cybercriminals are using virtual hard drives to drop RATs in phishing attacks
Latest in Security
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
Ai tech, businessman show virtual graphic Global Internet connect Chatgpt Chat with AI, Artificial Intelligence.
Nation-state threats are targeting UK AI research
Scam alert
Fake jobs and phone calls: How Americans lost $12.5 bn to fraud in 2024
Application Security Testing Concept with Digital Magnifying Glass Scanning Applications to Detect Vulnerabilities - AST - Process of Making Apps Resistant to Security Threats - 3D Illustration
Google bug bounty payments hit nearly $12 million in 2024
Scam alert
A new SMS energy scam is using Elon Musk’s face to steal your money
Representational image of a cybercriminal
Allstate sued for exposing personal customer information in plaintext
Latest in News
Vision Pro Metallica
Apple Vision Pro goes off to never never land with Metallica concert footage
Mufasa is joined by another lion, a monkey and a bird in this promotional image
Mufasa: The Lion King prowls onto Disney+ as it finally gets a streaming release date
An American flag flying outside the US Capitol building against a blue sky
Sean Plankey selected as CISA director by President Trump
An Nvidia GeForce RTX 4060 on a table with its retail packaging
Nvidia RTX 5060 GPU spotted in Acer gaming PC, suggesting rumors of imminent launch are correct – and that it’ll run with only 8GB of video RAM
Indiana Jones talking to a friend in a university setting with a jaunty smile on his face
New leak claims Indiana Jones and the Great Circle PS5 release will come in April
A close up of the limited edition vinyl turntable wrist watch from AndoAndoAndo
This limited-edition timepiece turns the iconic Technics SL-1200 turntable into a watch, and I want one