Russian-linked hackers are exploiting 3D design tools, specifically Blender project files, to distribute information-stealing malware targeting animators and developers. The campaign involves embedded Python scripts within malicious files posted on platforms like CGTrader, with the malware StealC V2 stealing browser data, crypto wallets, and messaging app information. #StealC #Blender #CyberThreats #RussianCyberOperations
Keypoints
- Hackers are using Blender project files to distribute malware to creative professionals.
- Malicious files are often posted on online platforms such as CGTrader targeting unsuspecting users.
- The malware StealC V2 is designed to steal browser data, crypto wallets, and messaging app information.
- Blender’s ability to automatically execute embedded Python scripts is exploited for malicious purposes.
- This campaign marks the first link between Blender file abuse and Russian-speaking threat actors using StealC.
Read More: https://therecord.media/hackers-blender-software-malware