New Arcane infostealer infects YouTube, Discord users via game cheats

Arcane is a newly discovered information‑stealing malware campaign (active since Nov 2024) that harvests a broad set of user data — VPN and gaming credentials, messaging and email data, browser logins/cookies, crypto wallets, screenshots and Wi‑Fi passwords — and is distributed via social‑engineering on YouTube and Discord (password‑protected archives and a fake downloader, ArcanaLoader). Kaspersky telemetry shows most infections in Russia, Belarus and Kazakhstan; the campaign replaced a previous stealer (VGS/Phemedrone) and uses obfuscation and Windows Defender evasion techniques.