A New Trojan is Targeting Gamers

Every time I download a sketchy file from the internet I know the gamble I am taking. No matter how many scans you run on a file there is always a chance that a virus can slip through and steal all of your information. Lately, a new Trojan has been stealing all kinds of information from computers with a focus on game accounts.

This new Trojan, called BloodyStealer, is a Trojan-stealer capable of gathering and exfiltrating various types of data, for cookies, passwords, forms, banking cards from browsers, screenshots, log-in memory, and sessions from various applications. This also includes information for game platforms such as Steam, Origin, and Epic Games.

Kaspersky, a Cybersecurity firm, first detected the Trojan back in March 2021. The virus was being advertised for sale at the low price of 700 RUB or less than $10, for one month of use or around $40 for a lifetime subscription. Attacks using the virus have already been detected in Europe, Latin America, and the Asia-Pacific region.

Once the information is taken by the Trojan it is then exfiltrated to a remote server, where it is then likely sold on darknet platforms for hackers to use as they please. Once it is sold, the previous owner will have a much harder time getting their account back as the buyer will most likely change the information associated with the account.

Luckily, most gaming platforms these days offer two-factor authentication services. This way, even if the login information is stolen, the buyer still can’t get into the account and the owner has a chance to change the information and re-secure their account. The main issue with BloodyStealer is that it takes all the information stored in your browser. This means if your login to Steam is stolen, your email log-in is probably stolen as well.

While Kaspersky did not reveal the method used to get the Trojan onto the victim’s PC, the normal method of getting the virus onto a system is through downloading games from fraudulent sites or through email and chat messages, with links to sites that trick gamers into entering their account information.

Until your antivirus software is updated to better detect BloodyStealer it would be good to use caution when downloading files. While this is a practice you should always use, this current threat is known to target gamers and should have you on a higher than normal alert.