Researchers in Russia have identified a new malicious miner that hides inside files presented as simulator games. Over several weeks, thousands of users were affected, a finding reported by Izvestia with insights from Kaspersky Lab. The attackers distributed the threat as free game installers found in torrent viewers, exploiting the popularity of gaming to spread the malware.
These Trojan installers carried a modified version of XMRIG, the well known mining tool. The distribution campaign began on December 31, 2024, and quickly circulated through torrent platforms that host free games and mods.
After installation, the miner consumes CPU and GPU resources, slowing systems, causing freezes, and triggering overheating of components. Some plugins loaded with the package added extra modules that pushed processing load and stressed browsers and other running applications.
Beyond performance degradation, affected users faced loss of game accounts or virtual currencies, and there were reports of compromised payment methods. Infected devices could be enlisted into a botnet controlled by attackers for broad mining operations, turning ordinary PCs into gear for cryptocurrency production.
To protect against such threats, users should download software only from official publishers and trusted stores. Keeping the operating system and all applications up to date is essential, as is using reputable security software and maintaining strong, unique passwords for gaming accounts.
This wave of attacks comes amid ongoing concerns about cybersecurity vulnerabilities in Russian enterprises in 2024, highlighting the persistent risk from software supply chains and poorly secured game mods.
Security professionals urge vigilance. Users should consider disabling unknown browser extensions, reviewing game launchers, and backing up data regularly. Using a robust antivirus program and a firewall helps reduce exposure, and avoiding downloads from untrusted sources remains the most important defense.
Although the incident centers on Russia, it has global relevance. Players and home users in Canada and the United States should treat free game downloads and torrents with caution, verify installers, and maintain good security practices to prevent hidden mining software from taking over devices.