A new campaign based on a fake game called “Cthulhu World” is in the wild, where hackers are robbing players’ cryptocurrencies in the process.
The campaign starts with threat actors messaging potential players on Twitter – asking them to test their game by running a code, which eventually brings in a data stealing malware onto their systems. Besides getting deep access to the victim’s systems, they also steal their cryptocurrency balances.
Fake Crypto Game Robbing People
A cybersecurity researcher named iamdeadlyz has spotted a campaign based on a fake play-to-earn game that’s stealing people’s cryptocurrency funds. Play-to-earn games are growing rapidly these days, especially the ones that are offering freebies of cryptocurrencies or NFTs.
The current campaign is about “Cthulhu World“, where threat actors made a perfect website with project paper, Discord groups, and medium size for developers to make people believe it’s legit.
1/
Cthulhu World
CWorldP2E (id: 1559535183753367552)
/cthulhu-world.com#RaccoonStealer, #AsyncRAT, & #RedLineStealer pieces of malware in one fake P2E game project.Armed with several alt accounts for setting the bait… pic.twitter.com/6u4sSo9CGK
— iamdeadlyz (@Iamdeadlyz) August 25, 2022
They start off by messaging potential players on Twitter, asking them to test their game for Ethereum rewards. When agreed, they’re directed to the Cthulhu World website, which boasts the design and a map stolen from a legitimate Alchemic World project, which warned about fake projects.
Players are then asked to download a code – pretending to be the “alpha” test of their project. But in truth, it’s either of their three data-stealing malware for looting. Based on the player and their system, threat actors inject either  AsyncRAT, RedLine Stealer, or Raccoon Stealer.
These are sophisticated data stealers and are also able to drain out victims’ wallet balances. Some of the game’s victims have already reported losing their funds. While the game’s website is down as of writing this, their Discord group is still up.
https://twitter.com/imran_s_rizvi/status/1560413806773288960?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1560413806773288960%7Ctwgr%5E789626d674576d07d6b1d7ac1f681d42f183e484%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Ftechdator.net%2Fcthulhu-world-robbing-players-cryptocurrencies%2F
Infected users – those who downloaded and ran the code – are advised to scan their device immediately and remove any malware flagged by your antivirus. Also, since these data stealers can get passwords, cookies, and crypto wallet addresses, you’re advised to reset all the passwords and move your cryptocurrencies to new wallets.
Other Trending News:- Â News
