Bitdefender warns of Powercat malware masquerading as Roblox cheat

Bitdefender researchers have identified a sophisticated malware campaign that targets players of the popular online game Roblox. The malicious software, recorded as Powercat, is distributed through gaming forums and Discord servers and is disguised as an “invisible” version of the widely used script executor Xeno.

The payload mimics a legitimate Xeno installation, then deploys additional components that install a hidden Java environment, modify Windows startup entries, and establish a persistent connection to the attackers’ server. Powercat can capture keystrokes, take screenshots, access webcams, steal passwords, credit‑card details, cryptocurrency wallets and execute remote commands, posing a serious threat to home computers, especially those used by children and adolescents.