logo

Cybercriminal Campaign Spreads Infostealers, Highlighting Risks to Web3 Gaming

ID: 08519709-4213-5cbc-806b-f03360382fae

STIX ID: report--08519709-4213-5cbc-806b-f03360382fae

Feed Name: Recorded Future Blog

Threat Score
72/100

Date Published: 2024-04-11

Date Updated: 2026-04-28

...
...

Recorded Future's Insikt Group identified a Russian-language cybercriminal campaign that creates imitation Web3 gaming projects and fake social accounts to distribute infostealer malware (including AMOS, Stealc, Rhadamanthys, and RisePro) to both Intel and Apple M1 macOS and Windows devices; the actors appear focused on compromising cryptocurrency wallets, use resilient/replicated infrastructure for continuity and rebranding, and employ tactics that can evade EDR/AV, so defenses should emphasize user education and comprehensive mitigations.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.