MSBuild

Fake game downloads are spreading malware through RenPy Loader, which uses MSBuild and EtherHiding to deliver Amatera Stealer. The malware steals sensitive data like passwords, cryptocurrency wallets, and browser information by disguising itself as legitimate game or software installers.