OTX Threat: 11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload
AI Summary
Eleven malicious NuGet packages distributed as .NET command-line tools masquerade as game utilities and cheats for popular games including Albion Online, GTA5RP, GrandRP, and Throne and Liberty. Each package functions as a first-stage downloader that uses DNS-over-HTTPS to bypass local controls, requests UAC elevation to resync system time, and fetches a second-stage PyInstaller payload named pepe
Discussion
Sign in to join the discussion.
Loading comments…