ChromeLoader Malware Targets Gamers with Fake Nintendo and Steam Game Hacks via VHD Files
A new malware campaign has been observed targeting gamers through fake game hacks and cracks for Nintendo and Steam games. The campaign is distributing the ChromeLoader malware through virtual hard disk (VHD) files, which is a deviation from the previous ISO optical disc image format.
ChromeLoader is malware that originally surfaced in January 2022 as a browser-hijacking credential stealer. However, it has since evolved into a more potent, multifaceted threat that can steal sensitive data, deploy ransomware, and drop decompression bombs. The primary goal of the malware is to compromise web browsers like Google Chrome and modify browser settings to intercept and direct traffic to dubious advertising websites. Additionally, ChromeLoader has emerged as a conduit to carry out click fraud by leveraging a browser extension to monetize clicks.
The shift to VHD files is a sign that the campaign has gone through many changes over the past few months. The VHD files are being distributed with filenames that make them appear like either hacks or cracks for Nintendo and Steam games. Users looking for pirated software and video game cheats are the main targets, leading to the download of VHD files from fraudulent websites appearing on search results pages.
Some of the game titles and popular software used in this campaign are Elden Ring, Dark Souls III, Red Dead Redemption 2, Need for Speed, Call of Duty, The Legend of Zelda: Breath of the Wild, Mario Kart 8 Deluxe, Super Mario Odyssey, Microsoft Office, and Adobe Photoshop.
"When a VHD file is downloaded through this process, the user can easily mistake the malicious VHD file for a game-related program," ASEC researchers said. "Disguising malware as game hacks and crack programs is a method employed by many threat actors."
To mitigate such risks, it's recommended that users refrain from following suspicious links and download software only from official sources. Users should also be vigilant while downloading software and avoid downloading software from unfamiliar or suspicious websites. Installing antivirus and anti-malware software can also help protect users from these types of threats.
Also Read: Exploring the Dark Side of Cybersecurity
This is not the first time that malware has been distributed through fake game hacks and cracks. Threat actors have long used this method to lure unsuspecting users into downloading and installing malware onto their systems. It is important to remain vigilant and cautious when downloading any software or files from the internet.
Thank you for reading our blog today. We hope you found the information helpful and informative. If you enjoyed this blog, follow us on Twitter, Instagram, Linkedin, GitHub, Website, and Youtube for more exciting content and updates. If you have any questions or comments, please feel free to reach out to us. We would love to hear from you. Don't forget to share this with your friends and family who may also find this information useful. Thank you for your support and stay tuned for more!