Malware
Ongoing coverage on Malware.
Latest coverage
These two huge PC performance app downloads have been infected by a virus
The download pages for PC performance monitoring applications CPU-Z and HWMonitor, operated by CPUID, were compromised with malware. Download links were replaced with infected files, though the correct links appear to have been restored. Users who downloaded the software recently are advised to check file names and run virus scans, as Windows Defender reportedly flagged the compromised versions.
CPUID's download page has been hacked, with its popular processor and PC info tools replaced with links to files…
CPUID's official download page for its popular CPU-Z and HWMonitor software has been compromised, with malicious files replacing legitimate downloads. The altered files, detected by antivirus software, are part of a sophisticated malware campaign that deeply trojanizes the executables and uses advanced evasion techniques. This incident follows a similar attack on FileZilla, suggesting a pattern by the same threat group.
Web-code library with millions of weekly downloads poisoned by malicious release: 'This is unironically a malware…
The popular JavaScript library Axios was targeted in a sophisticated supply chain attack, with malicious versions distributing a remote access trojan. Attackers, identified as a North Korea-nexus threat actor, pre-built payloads and poisoned release branches, with malware calling home within seconds of installation. While malicious versions were quickly removed, cybersecurity firms warn of potential compromise and recommend thorough security assessments.
Morning Safety Dance
A self-propagating malware has been discovered in a popular Python library, turning it into a backdoor that can compromise entire machines. The attack specifically targeted and wiped machines based in Iran, highlighting significant open-source software security vulnerabilities.
After Infecting PCs With Malware, Gacha Game Gives Out Free Loot Boxes To Apologize
The developers of the gacha RPG Duet Night Abyss, Pan Studio, have apologized for a cybersecurity incident that infected players' PCs with malware via a game launcher update patch. The malware, identified as Trojan:MSIL/UmbralStealer.DG!MTB, is an infostealer. In response, Pan Studio is offering players 10 free gacha pulls and other in-game rewards as compensation.
If you were scammed by malware hiding in your Steam games, the FBI wants to hear all about it
The FBI is seeking information from individuals who have been victims of malware distributed through games on the Steam platform. Several specific games, including BlockBlasters and Tokenova, have been identified as sources of malware that operated between May 2024 and January 2026, with some instances leading to significant financial loss through cryptocurrency theft.
The FBI is looking into Steam games loaded with malware—and one is still up on the store
The FBI's Seattle Division is investigating Steam games found to contain malware, with some titles released as recently as January 2024 still available on the platform. Games like Lampy, BlockBlasters, and PirateFi have been identified, with BlockBlasters reportedly stealing over $150,000 in crypto. While some games have been removed, Lampy remains active on Steam.
The FBI is hunting down malware-loaded games on Steam
The FBI is investigating a series of malware-infected games distributed on the Steam platform between May 2024 and January 2026. The agency is seeking information from players who downloaded titles like BlockBlasters, Chemia, and PirateFi, which contained malicious software capable of stealing personal data. Valve is cooperating with the investigation and has removed some affected games from its platform.
FBI Launches Investigation Into Games Removed From Steam Over Malware Concerns
The FBI's Seattle Division has launched an investigation into several games removed from Steam for allegedly spreading malware. Players who downloaded titles like BlockBlasters, Chemia, and PirateFi between May 2024 and January 2026 are urged to report if they were victimized. Valve is not a target of the investigation.
Evening Safety Dance
WordPress websites are being compromised by cybercriminals who are then distributing infostealer malware. This security threat targets user data through these compromised sites.
Malwarebytes says a fake Google Account security page is distributing 'what may be one of the most fully featured browser-based surveillance toolkits we have observed in the wild'
Cybersecurity firm Malwarebytes has identified a sophisticated phishing campaign using a fake Google Account security page to distribute a highly capable browser-based surveillance toolkit. This malware can infect Windows, macOS, and Android devices, capable of clipboard monitoring, SMS interception, and even acting as a WebSocket relay to bypass network security. The Android version includes a custom keyboard for keystroke logging and notification listening for two-factor authentication codes.
