Cybersecurity experts recently drew attention to a high-tech data theft campaign. It has been running since at least April last year and continues to this day.
The investigation revealed a previously undescribed family of malicious programs, "RenEngine Loader." The malicious code is hidden inside files that mimic a game launcher based on the Ren’Py engine.
Experts note that in this campaign, attackers use hacked games for distribution. They may appear to be working, but at the same time contain malware along with the game content.
The total number of victims is estimated at 400+ thousand users. On average, more than 5 thousand PCs are infected per day.
Russia is in the top 10 countries with the highest number of RenEngine Loader infections — ranking fourth.
- India — 38,016 cases
- USA — 31,317
- Brazil 25,220
- RF — 22,366
- Egypt — 19,500
- Turkey — 18,835
- Spain — 18,109
- Indonesia — 15,790
- Pakistan — 15,426
- France — 14,100
The following compromised games are known:
- Far Cry
- Need for Speed
- FIFA
- Assassin’s Creed