{"id":27533,"date":"2021-09-01T16:13:25","date_gmt":"2021-09-01T13:13:25","guid":{"rendered":"https:\/\/saudishopper.com.sa\/en\/?p=27533"},"modified":"2026-03-27T23:08:38","modified_gmt":"2026-03-27T20:08:38","slug":"the-low-hanging-fruit-dangerous-stealer-disguised-as-games-and-other-software-shows-up-on-first-page-in-search-engine-results","status":"publish","type":"post","link":"https:\/\/saudishopper.com.sa\/en\/the-low-hanging-fruit-dangerous-stealer-disguised-as-games-and-other-software-shows-up-on-first-page-in-search-engine-results\/","title":{"rendered":"The low hanging fruit? Dangerous stealer disguised as games and other software shows up on first page in search engine results"},"content":{"rendered":"\n

Even with more ways to play games, from new consoles to in-browser options and mobile games,\u00a0demand for PC games persists. So does a gamer\u2019s desire to play them for free \u2013 often by finding and downloading cracked versions of games. However, such shortcuts often come at a cost, with users installing dangerous malware instead of the desired game. Sometimes, cybercriminal groups go as far as setting up a network of websites, which are meant entirely for the distribution of such malware \u2013 as was the case in the latest campaign discovered by Kaspersky.<\/p>\n\n\n\n

In April 2021,\u00a0Kaspersky researchers observed a massive, well-coordinated campaign, which distributed a dropper \u2013 a program that secretly executes a malicious program \u2013 dubbed Swarez. The dropper was delivered through dozens of fake warez websites \u2013 platforms that specialize in free\u00a0distributed copyrighted materials, which are considered to violate copyright law. These websites distributed malware\u00a0under the guise of cracks for a different software, including\u00a0anti-malware, photo or video editing software, and fifteen popular computer games. Users in 45 countries across the world were attacked by such files disguised as games.<\/p>\n\n\n\n

After a chain of redirects from the warez website, the users downloaded a ZIP archive with password protected ZIP file and a text document with the key to unpack it. The installation process looked complicated enough for users to be tricked into thinking they were installing the game they were looking for. In reality, the users downloaded the Swarez dropper, which, in turn, decrypted and executed a Taurus Trojan-Stealer, a paid stealer, which has many functions and is flexible and configurable. The malware is capable of stealing cookies, saved passwords, autofill data from browsers, and data related to crypto wallets. It gathers information about the system, .txt files from the user\u2019s desktop and can even take screenshots.<\/p>\n\n\n\n

\"\u0627\u0644\u0628\u0631\u0645\u062c\u064a\u0629<\/a><\/figure>\n\n\n\n

Downloaded malware emulated cracked software to trick users into executing it<\/em><\/p>\n\n\n\n

One of the most concerning aspects of the campaign was how easy it was to reach the right targets. Cybercriminals optimized their websites for specific search keywords, and in some cases, managed to get their malicious sites into the top three results of popular search engines.<\/p>\n\n\n\n

\"\u064a\u0639\u0631\u0636<\/a><\/figure>\n\n\n\n

A search for Minecraft crack keys offers websites with Swarez in the top results<\/em><\/p>\n\n\n\n

\u201cOur devices contain more valuable information about us and our finances than ever \u2013 and therefore are an ultimate target for various cybercriminals. The Swarez campaign demonstrates that tricking users into installing software from some unknown source remains an effective way of getting malware onto their devices. And cybercriminals invest in creating more complex schemes to convince users that what they are installing is not malware \u2013 to the point of emulating installation processes. This demonstrates that there is no middle ground \u2013 to stay safe from threats such as these, users need to stick to downloading software from trusted, official sources, because at the end of the day, the payment for making a mistake may end up being much higher than the cost of a game or other software,\u201d<\/em>comments Anton V. Ivanov, security researcher at Kaspersky.<\/p>\n\n\n\n

Learn more about game-related cyberthreats in the latest report on this topic on Securelist.com<\/a>.<\/p>\n\n\n\n

To stay safe from threats such as Swarez, Kaspersky recommends:<\/p>\n\n\n\n