New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

A RedLine Stealer variant has been observed using Lua bytecode and weaponized GitHub uploads to distribute malicious ZIP archives (masquerading as game cheats) that install an MSI which runs embedded Lua bytecode, establishes persistence, and communicates with a RedLine-associated C2 to perform info-stealing and backdoor tasks; the report highlights abuse of a GitHub issue-upload bug and related TTPs targeting the gaming community.