Nearly 1 million PCs infected by malvertising on pirated streaming sites. Attackers used GitHub, Dropbox, & Discord to host info-stealers (Lumma, Doenerium) and NetSupport RAT. Microsoft removed the malicious GitHub repos.#MalvertisingStreamingThreat
March 6, 2025 at 9:04 PM
Nearly 1 million PCs infected by malvertising on pirated streaming sites. Attackers used GitHub, Dropbox, & Discord to host info-stealers (Lumma, Doenerium) and NetSupport RAT. Microsoft removed the malicious GitHub repos.#MalvertisingStreamingThreat
🎮 We analyzed an ongoing campaign targeting online gamers. Multiple malware families are delivered through fake video game websites such as #Epsilon, #Doenerium, #BByStealer, and #NovaSentinel.
blog.sekoia.io/game-over-ga...
#CTI #infostealer
blog.sekoia.io/game-over-ga...
#CTI #infostealer
Game Over: gaming community at risk with information stealers
This report was originally published for our customers on 26 October 2023. The world of online gaming, a thriving global community of millions, has become an enticing target for malicious actors seeki...
blog.sekoia.io
November 13, 2023 at 10:02 AM
🎮 We analyzed an ongoing campaign targeting online gamers. Multiple malware families are delivered through fake video game websites such as #Epsilon, #Doenerium, #BByStealer, and #NovaSentinel.
blog.sekoia.io/game-over-ga...
#CTI #infostealer
blog.sekoia.io/game-over-ga...
#CTI #infostealer
Des infostealers ciblent les gamers francophones
Des infostealers ciblent les gamers francophones
Le spécialiste français de la cybersécurité Sekoia.io a révélé, le 13 novembre 2023, une vaste campagne cybercriminelle contre la communauté francophone du gaming, lancée à l’été 2023 et toujours active. Elle s’appuie sur de nombreux faux sites de téléchargement de jeux vidéos, installant en fait les infostealers Doenerium et Epsilon.
incyber.org
November 16, 2023 at 5:56 PM
Des infostealers ciblent les gamers francophones
Large-scale malvertising campaign from pirate streaming sites redirected to GitHub-hosted info stealers, compromising ~1M devices globally via multi-stage attack chain deploying Lumma, Doenerium, and NetSupport RAT.
www.microsoft.com/en...
www.microsoft.com/en...
Malvertising campaign leads to info stealers hosted on GitHub | Microsoft Security Blog
Microsoft detected a large-scale malvertising campaign in early December 2024 that impacted nearly one million devices globally. The attack originated from illegal streaming websites embedded with malvertising redirectors and ultimately redirected users to GitHub to deliver initial access payloads as the start of a modular and multi-stage attack chain.
www.microsoft.com
March 7, 2025 at 6:14 PM
Large-scale malvertising campaign from pirate streaming sites redirected to GitHub-hosted info stealers, compromising ~1M devices globally via multi-stage attack chain deploying Lumma, Doenerium, and NetSupport RAT.
www.microsoft.com/en...
www.microsoft.com/en...