Anyone hiding malware in Steam games is cooked, Steam and the FBI are warning BlockBlasters players again. BlockBlasters was a Steam game that turned out to contain malware and was used in crypto-draining attacks, including one targeting a terminally ill cancer patient. The FBI says it arrested someone linked to the Steam malware campaign in July and is now asking victims who lost money or had their accounts compromised to fill out a survey for possible restitution. The deadline is 27 October. If someone was hiding malware inside Steam games, things are looking pretty bad right now for you, Gabe is coming.

⚠️ A Windows malware loader uses the encrypted Tox messaging network for command-and-control, avoiding reliance on a fixed C2 server. 🔍 @varonis reveals how AvisLoader operates and how defenders can detect it. ➡️ #cybersecurity# #sponsored#

A new malware campaign targets Steam users via discussion forums. Attackers reply to posts about game crashes and technical issues with fake solutions, telling users to run a PowerShell command that claims to fix the problem. Instead, it installs malware without their knowledge. According to BleepingComputer, the malware also creates hidden files, adds Windows Defender exclusions to avoid detection, and launches automatically on startup. Steam users should be cautious of forum posts that ask them to run commands outside Steam, especially via PowerShell or Command Prompt.

🚨 SlowMist TI Alert: KREMLIN Malware 🚨 Recently, a Brazilian banking malware operation, #REF9334#, active since at least May 2025, was disclosed. 🔴 The #KREMLIN# malware ecosystem uses multi-stage loaders and malicious browser extensions to steal credentials, session tokens, and sensitive data. ⚠️ Its malicious extensions can be installed in #Chrome# and #Edge# without user approval by bypassing Chromium integrity mechanisms, including Secure Preferences, HMACs, and App-Bound encrypted hashes. ⛓️ The operation also uses #Ethereum# smart contracts as dead-drop resolvers to dynamically update C2 endpoints and payload hosting locations, making the infrastructure harder to disrupt. ⚙️ After registering a network canary (kill switch) domain, analysts observed 1,515 infected hosts checking in, with 98.75% located in Brazil. 🛡️ Security teams should monitor for related malware, browser-extension activity, and infrastructure associated with the campaign. 🔑 Admin: - 0x5C32A09873be70a92fd8bB5A9fED7967dE06BdE6 📜 Smart Contracts: - 0x902EDbFECFF38f285Bf26283fB9cEB3700061873 - 0x64Def0A6099c4DE9C413B108EAae85A3C7457615 - 0xCD7360A83E5cdbBbbbcEB0e78748babA6740d07b (currently active) 🔎 IOCs: 📌 Source:

Your merch sucks But does @Malwarebytes? My favorite part of this merch drop is the theme across the designs: blacked out branding on black the all black bag and hoodie From a common sense perspective, this is silly: “why put your logo on swag in a way that DOESN’T stand out?” But, if you know what Malwarebytes stands for and their latest campaigns are focused on, it makes perfect sense. Privacy (or as the sticker calls it ‘privacy-maxxing’) Which means the blacked out design style fits exactly! Thank you for the awesome swag, I promise to keep it low key, like my sensitive data🥷🏻 @missionnorth