Malicious Blender model files deliver StealC infostealing malware
Malicious Blender files submitted to 3D model marketplaces such as CGTrader are used by a Russian-affiliated campaign to spread the StealC V2 information stealer malware.
With the ability to run Python scripts for automation, configurable UI panels, add-ons, rendering procedures, rigging tools, and pipeline integration, Blender is a potent open-source 3D development package.
A Python script can automatically load the facial controls and custom UI panels with the necessary buttons and sliders when a user opens a character rig if the Auto Run feature is enabled.
Users frequently turn on the Auto Run option for convenience, despite the possibility of misuse.
Attacks utilizing malicious.blend files with embedded Python code that retrieves a malware loader from a Cloudflare Workers...