Skip to content
The Nexus
SECURITYJul 20 · 10:59 UTCMALWAREBYTES LABS

Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding

Fake game downloads are spreading malware through RenPy Loader, which uses MSBuild and EtherHiding to deliver Amatera Stealer. The malware steals sensitive data like passwords, cryptocurrency wallets, and browser information by disguising itself as legitimate game or software installers.

Nexus surfaces and summarizes. The full story lives at the source.

Mentioned
Spot something wrong with this article?Report a problem →
Forward this
Related Signal

Adjacent reporting