“This incident highlights another reason TAs utilize game installers as a delivery mechanism: the powerful hardware commonly associated with gaming provides valuable computing power for mining cryptocurrencies,” Cyble researchers said. The threat actors may have chosen this game because it has a large user base. It was released in 2003 by Buziol Games and has racked up millions of downloads. 3: Mario Forever is a remake of the classic Super Mario game.
The latter doesn’t only mine cryptocurrency on targets’ devices but also loads an information-stealing malware known as Umbra Stealer. 3 game to spread crypto miners and information-stealing malware, Cyble Research & Intelligence Labs revealed in a blog post on June 23.Īccording to Cyble researchers, the Super Mario installer is bundled with different cryptojacking malware a Monero (XMR) miner and the SupremeBot mining client. Threat actors are using a trojanized version of the popular Super Mario Bros.