SECURITYMALWAREBYTES LABS
Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
Fake game downloads are spreading malware through RenPy Loader, which uses MSBuild and EtherHiding to deliver Amatera Stealer. The malware steals sensitive data like passwords, cryptocurrency wallets, and browser information by disguising itself as legitimate game or software installers.
Mentioned
Related Signal