Russians were warned about the spread of malware disguised as cheats

Hackers began distributing malware to collect data under the guise of cheat uploaders for playing Minecraft. This was announced on March 19 by Kaspersky Lab.

At the end of 2024, experts found a new Arcane steeler. He is able to collect various information from an infected device.

"The attackers went further and released the ArcanaLoader loader, which allegedly downloads cheats, cracks and other "utilities" for gamers, but in fact infects the device with the Arcane styler," Kaspersky Daily noted.

Initially, this program was distributed via YouTube. Links to it were left in the description of the bloggers' videos.

However, the hackers later changed their tactics. They began to advertise not the archive itself, but the ArcanaLoader loader developed by them. Hackers also created a server in Discord, where they talked about cheats. The downloader also contained this virus.

According to Kaspersky Lab cybersecurity expert Oleg Kupreev, the device, not the archive, is necessary for hackers to give their campaign imaginary legitimacy.

According to the company, information from over 1,000 players from Belarus, Kazakhstan, and Russia could have been stolen from the archive and the downloader from November 2024 to March 2025.

Few letters: hackers have adopted the method of password spraying

It allows cybercriminals to hack accounts with weak protection.

Earlier, on March 13, hackers were reported using compromised accounts. According to experts from the Solar 4RAYS Cyber Threat Research Center of the Solar Group of companies, they began to be resorted to three times more often.