Video game cheats used as malware distribution vector

Cybercriminals are increasingly using video game content as a vehicle to distribute malware. An investigation by Unit 42, the threat intelligence team at Palo Alto Networks, identified a campaign known as CL-CRI-1171 that has been operating for at least two years.

The campaign utilized fake YouTube channels to promote game cheats, performance enhancements, and various game solutions. These channels, which collectively reached hundreds of thousands of subscribers and millions of views, directed users toward malicious files. Following notification, YouTube canceled the identified channels.

Threat actors target players' desire for advantages, such as unlimited resources, unlocked characters, or improved frame rates. These downloads can lead to the theft of personal information, unauthorized access to mobile devices and computers, or the installation of unwanted software. Because many gamers use their devices for work, these infections can also serve as entry points into corporate networks.