Video Game Malware Hits 8,000 Devices, Steals Crypto From 80 Wallets
- Over 8,000 devices were infected by malware disguised as video game cheats or mods.
- The malware successfully accessed 80 cryptocurrency wallets, draining funds.
- Security experts are warning gamers to avoid downloading unverified mods and cheats.
A widespread malware campaign targeting video game enthusiasts has compromised over 8,000 devices and gained access to 80 cryptocurrency wallets, according to a report from Bitcoin News. The attack, which has been traced to malicious downloads disguised as game mods and cheat tools, highlights a growing threat in the intersection of gaming and digital finance.
How the Malware Spread
Researchers identified the malware being distributed through popular gaming forums and third-party download sites. The malicious code was bundled with files promising to unlock premium features, provide in-game currency, or offer unfair advantages in competitive titles.
Once installed, the malware executed a multi-stage payload. It first established persistence on the infected system, then began scanning for cryptocurrency wallet applications and browser extensions. The code was designed to extract private keys and login credentials, giving attackers direct access to the digital assets.
Scale and Impact of the Infection
Data collected by the security team tracking the campaign shows the scale of the operation. Over 8,000 unique devices were infected across multiple countries, with a significant cluster of victims in India, the US, and Southeast Asia. Of these, 80 wallets were successfully accessed, though the total amount stolen has not been disclosed.
The malware did not differentiate between wallet types. It targeted both software wallets installed on the device and browser-based extensions used for interacting with decentralised applications. In several cases, victims reported losing their entire crypto holdings before they realised their system was compromised.
Why Gamers Are a Prime Target
The gaming community's willingness to download third-party software for performance boosts or cosmetic changes makes them a lucrative target. Attackers exploit this trust by creating convincing copies of popular mods and cheats, often using the same naming conventions and file structures as legitimate tools.
Furthermore, many gamers store cryptocurrency on the same device they use for gaming. This convergence of high-value assets and lax security habits creates an ideal environment for cybercriminals. The report notes that in some cases, the malware remained undetected for weeks, silently exfiltrating data in the background.
What Users Should Do Now
Security experts recommend that gamers take immediate steps to secure their devices. This includes running a full antivirus scan, updating all software to the latest version, and enabling two-factor authentication on all crypto-related accounts.
Users who suspect they have been infected should transfer their cryptocurrency to a hardware wallet that is not connected to the compromised device. Changing all passwords and monitoring bank and crypto statements for unusual activity is also advised. The malicious files have been reported to hosting services, but copies may still be available on alternative sites.
Authorities have not yet confirmed if any arrests have been made in connection with this campaign. The investigation is ongoing, and cryptocurrency exchanges have been alerted to the compromised wallet addresses.
Gamers should remain cautious about any download from an untrusted source. The next wave of attacks could be even more sophisticated, using zero-day exploits to evade detection entirely. Staying informed and practising good cyber hygiene is the best defence against such threats.