"The malware disguises itself as a Minecraft hack called 'Slinky,' using the official game icon to induce voluntary execution, exploiting the trust of young users in the gaming scene."
"Minecraft has been a LofyGang target since 2022. They leaked thousands of Minecraft accounts under the DyPolarLofy alias on Cracked.io. The current campaign goes after Minecraft players directly through a fake 'Slinky' hack."
"The attack begins with a Minecraft hack that, when launched, triggers the execution of a JavaScript loader responsible for deploying LofyStealer on compromised hosts."
"The captured data includes cookies, passwords, tokens, cards, and International Bank Account Numbers (IBANs), which are exfiltrated to external servers."
A Brazilian cybercrime group has re-emerged to target Minecraft players using a new malware called LofyStealer, disguised as a hack named 'Slinky.' This malware exploits the trust of young gamers by using the official game icon. The group, known as LofyGang, has been active since late 2021 and previously leaked thousands of accounts. The current campaign involves a JavaScript loader that deploys LofyStealer to harvest sensitive data from various web browsers, including cookies, passwords, and financial information.
Read at The Hacker News
Unable to calculate read time
Collection
[
|
...
]