Updated:09:11 AM CEST Sep,17
NEWS
/ RSS
CHEATS
REVIEWS
ARTICLES
HARDWARE
DEMOS
FORUMS
LINKS
(
new
)
CONTACT
Please
e-mail us
if you have news.
(c) 1998-2026 Gameguru Mania
Privacy Policy
statement
SEARCH:
Gameguru Mania News - Feb,06 2026
-
view all
view only briefly
view only gameguru review
view only preview
view only media
view only movie
view only demo
view only patch
view only interview
view only tech
view only mod&map
view only gold
view only freegame
view only console
RenEngine Loader and HijackLoader Duo Infects Over 400,000 Gamers in Massive Stealer Campaign
- tech
(hx) 09:06 PM CET - Feb,06 2026 -
Post a comment
Cybersecurity researchers from Cyderes' Howler Cell Threat Research Team have
uncovered
a sophisticated, ongoing stealer campaign that has infected over 400,000 victims worldwide since at least April 2025. The attack exploits pirated game installers for popular titles like Far Cry, Need for Speed, FIFA, and Assassin’s Creed, distributed via cracking sites, luring users into executing malware disguised as legitimate software. At its core is the newly identified RenEngine Loader, hidden within a benign-looking Ren’Py game launcher, which decrypts and stages the next phase, handing off to an advanced variant of HijackLoader featuring novel anti-analysis modules such as ANTIVMGPU, ANTIVMHYPERVISORNAMES, and ANTIVMMACS. This dual-stage chain employs extensive evasion tactics—including DLL side-loading, module stomping, process doppelgänging, and sandbox detection—to ultimately deploy the ACR stealer, which exfiltrates credentials, cryptocurrency wallets, and other sensitive data to attacker infrastructure. The campaign continues to rack up around 5,000 new infections daily, highlighting the persistent risks of downloading cracked software from untrusted sources.
last 10 comments:
Add your comment
(free registration
required
)
Related news:
related cheats/trainer:
no results found
Links
Search results
for -
RenEngine
- :
no records found
External links