Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign
After more than three years, a Brazilian cybercrime group has reappeared to launch a campaign against Minecraft gamers using a new stealer known as LofyStealer (also known as GrabBot).
"The malware disguises itself as a Minecraft hack called 'Slinky,'" according to a technical analysis from Brazil-based cybersecurity firm ZenoX. It takes advantage of young users' confidence in the gaming community by using the official game icon to compel volunteer execution.
A threat actor known as LofyGang, which was seen using typosquatted packages on the npm registry to push stealer malware in 2022 with the specific goal of siphoning credit card information and user accounts connected to Discord Nitro, gaming, and streaming services, has been highly confidently linked to the activity.
The org...