Fake 'Cthulhu World' P2E project used to push info-stealing malware

guest · Sep 3, 2022

By Lawrence Abrams @LawrenceAbrams - August 27, 2022

Hackers have created a fake 'Cthulhu World' play-to-earn community, including websites, Discord groups, social accounts, and a Medium developer site, to distribute the Raccoon Stealer, AsyncRAT, and RedLine password-stealing malware infections on unsuspecting victims.

As play-to-earn games rise in popularity, scammers and threat actors increasingly target these new platforms for malicious activities.
To promote the "project", threat actors are sending direct messages to users on Twitter asking if they would like to perform a test of their new game. In return for testing and promoting the game, iamdeadlyz says that the threat actors promise a reward in Ethereum.
Click to expand...

However, this site appears to be a clone of the legitimate Alchemic World project, which has been warning users to stay away from the fake project.

The Cthulhu World website also has a big difference; when a user clicks on the arrow in the upper right-hand corner of the site, the visitor will bring them to a webpage asking for a code to download the "alpha" test of the project.
Click to expand...

Each of the three files installs a different malware, likely allowing the threat actors to pick and choose how they wish to target a particular user. The three malware identified by AnyRun installs are AsyncRAT, RedLine Stealer, and Raccoon Stealer.

If you have visited Cthulhu-world.com and downloaded any of their software, you should immediately run an antivirus scan on your computer and remove anything detected.
Click to expand...

Furthermore, as these malware infections steal your saved passwords, cookies, and crypto wallets, you should reset all passwords and create new wallets to import your cryptocurrency.
Click to expand...

Log in or Sign up

Fake 'Cthulhu World' P2E project used to push info-stealing malware

guest Guest

Log in or Sign up

Fake 'Cthulhu World' P2E project used to push info-stealing malware

guest Guest

Useful Searches