Bitcoin

when

Security

A new flood of mystery malware has reportedly been targeting video gamers and draining their Bitcoin (<a href="https://cointelegraph.com/bitcoin-price">BTC</a>) wallets as part of a new info stealer campaign, which also has been targeting cheaters.&nbsp;
Malware information repository vx-underground said in a March 28 X <a href="https://twitter.com/vxunderground/status/1773134740607979749" target="_blank" rel="noopener nofollow">post</a> it was aware of a “currently unidentified Threat Actor” using malware to steal login and other credentials of those using pay-to-cheat video game software.
The attacks target players, including those who buy cheating software, and have compromised over 4.9 million accounts for Activision Blizzard users and its game store Battle.net along with accounts for a game-focused trading site Elite PVPers and cheat software markets PhantomOverlay and UnknownCheats.
“Impacted users have begun reporting being victims of crypto-draining — their Electrum BTC wallets have been drained. We do not have any information on the amount of money stolen,” vx-underground wrote.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-03/d8b8b8af-b04a-499a-be46-662ab972382f.png">
 <figcaption style="text-align: center;">
 Source: <a href="https://twitter.com/vxunderground/status/1773134740607979749" target="_blank" rel="noopener nofollow">vx-underground</a>
 </figcaption>
</figure>
In a March 27 Telegram <a href="https://t.me/PhantomOverlayChat/1339117" target="_blank" rel="noopener nofollow">post</a>, PhantomOverlay claimed the number of hacked accounts “are inflated” as over half of the logins in a database it viewed “are invalid garbage.”
It added the malware “seems to be an entire network of free/cheap software” that has originated from “some latency program, VPN, or something that millions of gamers are using.”
<blockquote>
 “It’s the largest infostealer malware campaign in gaming/cheating community history.”
</blockquote>
In a separate <a href="https://t.me/PhantomOverlayChat/1340486" target="_blank" rel="noopener nofollow">post</a>, PhantomOverlay claimed it has “a pretty good idea of where the malware is coming from but the malware gang is aware of suspicions on them [and] has made it increasingly hard to prove anything.”
Activision Blizzard had contacted the cheat-selling site and “will help us assist millions of infected users,” PhantomOverlay said.
An Activision Blizzard spokesperson told Cointelegraph it was aware of claims that credentials “across the broader industry could be compromised from malware from downloading or using unauthorized software.”
Related: <a href="https://cointelegraph.com/news/prisma-finance-exploited-10-million">Prisma Finance exploited in $10 million breach</a>
It said its servers “remain secure and uncompromised” and recommended users change their password if they want to ensure their accounts are protected.
In its post, vx-underground wrote that PhantomOverlay was “alerted of fraudulent activity when user accounts began making unauthorized purchases.”
PhantomOverlay contacted the alleged victim, and since then, more have been identified, it said.
Magazine: <a href="https://cointelegraph.com/magazine/pink-drainer-security-researcher-steals-millions-from-participants/">Inside Pink Drainer — Security analyst defends his crypto scam franchise</a>

Mystery malware targets Call of Duty cheaters, stealing their Bitcoin

Cointelegraph

Other articles published on Mar 29, 2024

Goat.Tech Launches Revolutionary On-Chain Reputation System to Combat Crypto Scams and Foster Tru...

Binance Announces Ethena (ENA) as its 50th Launchpool Project

Spell Token Price Prediction: What Next in SPELL Price?

Crypto Gains Insights on the Hottest Meme Coin Launching Soon – Dogecoin20 Presale Review

Mark Yusko Predicts Bitcoin Price Surge to Six Figures

Ethereum Co-Founder Vitalik Buterin Criticizes Ongoing Meme Coin Frenzy

Join our free newsletter for daily crypto updates!