{"id":18700,"date":"2021-08-23T18:33:37","date_gmt":"2021-08-23T14:33:37","guid":{"rendered":"https:\/\/me-en.kaspersky.com\/blog\/malware-in-pirated-games-2021\/18700\/"},"modified":"2021-08-23T18:33:37","modified_gmt":"2021-08-23T14:33:37","slug":"malware-in-pirated-games-2021","status":"publish","type":"post","link":"https:\/\/me-en.kaspersky.com\/blog\/malware-in-pirated-games-2021\/18700\/","title":{"rendered":"The dangers of pirated games"},"content":{"rendered":"

So long as gamers seek out free apps in the form of unlicensed copies, cracks, and other goodies, cybercriminals will continue to prey on them, and we will continue to spotlight the dangers gamers face. Here are some we\u2019ve found over the past year.<\/p>\n

Cyberattacks on gamers<\/h2>\n

Our experts took a look at how cybercriminals made money from gamers<\/a> who skimped on both gaming and security, ending up with unexpected apps along with (or instead of) the games they thought they were downloading.<\/p>\n\n

Want some ads?<\/h3>\n

Perhaps the most common surprise greedy gamers find in their popular games is adware. Although not usually too harmful, adware can be very annoying. With this uninvited guest on their computer or smartphone, users will constantly be closing banners, pop-up videos, and browser pages they didn\u2019t open.<\/p>\n

Cryptomining, a timeless threat<\/h3>\n

In the hierarchy of bad stuff users might get with pirated games, cryptominers rank far higher than adware. Gamers, with their souped-up computers and brawny video cards, make ideal targets for cryptocurrency freeloaders \u2014 and a miner concealed inside a game with high system requirements can go unnoticed for quite some time, during which the computer is working for a malicious third party.<\/p>\n

Swarez: Danger at the top of search results<\/h3>\n

Most gamers know that the place to get official games is a specialized store such as Steam. But for a \u201cMinecraft crack\u201d or \u201cvirus-free FIFA,\u201d they turn to search engines. Cybercriminals take advantage of this, creating websites offering free keys, cracks, and unlocked versions of games; adding Trojans; and pushing them onto the first page of search results. Alternatively, they can load infected, pirated copies onto existing warez sites.<\/p>\n

That is how the Swarez loader gets distributed. Users who try to download, say, cracks for Minecraft<\/em> get sent through a long chain of redirects to a page with a ZIP archive, inside of which is another password-protected ZIP and a text file with a key. Unzipping the archive loads Swarez on the unfortunate gamer\u2019s device, where it proceeds to download Taurus spyware, a Trojan that takes screenshots and steals cryptowallets, desktop files, and passwords and other data stored in browsers.<\/p>\n

Fake Minecraft targets Android users<\/h3>\n

Minecraft<\/em> remains very popular cyberattack bait, including on smartphones and tablets. Back in 2020, we found more than 20 malicious apps on Google Play<\/a> disguised as mods for the game, and this year saw a repeat<\/a>.<\/p>\n

The game also serves as a front for Hqwar<\/a> malware, which reports an installation error and prompts the user to uninstall the app. In fact, that removes only the icon; the malware remains, working in stealth mode to harvest online bank credentials.<\/p>\n

Vesub Trojan disguised as Brawl Stars and PUBG<\/h3>\n

Another example of cunning malware, Vesub, hides in pirated versions of Brawl Stars<\/em> and PUBG<\/em> for Android.<\/p>\n

When run, the malware appears to load very slowly \u2014 and then, nothing. The victim, seeing the game is not working, quits. The icon disappears from the screen at that point, but the Trojan remains on the device and gets to work.<\/p>\n

What\u2019s actually happening during that fake startup is data collection: Vesub collects system data and receives further instructions. Then, running in the background, it can subscribe the victim to paid services, send text messages from their smartphone, play YouTube videos, visit app pages on Google Play, and open advertising websites.<\/p>\n

And then there\u2019s phishing<\/h3>\n

By now you should understand quite well that downloading pirated games is far more trouble than it\u2019s worth. If so, your gaming experience just became a lot safer. However, you should know about another way cybercriminals exploit gamers\u2019 quest for freebies: offering bundles of games at a 99% discount, promising mountains of free or near-free in-game currency, and inviting players to take part in nonexistent tournaments.<\/p>\n

Hiding behind famous titles \u2014 from FIFA 21<\/em> and Apex Legends<\/em> to GTA Online<\/em> and Pokemon Go<\/em> \u2014 cybercriminals scoop up victims\u2019 e-mail addresses, social network names and login credentials, and game info. Even without passwords, such information fetches a price on the dark web<\/a>. Need we state that by entering your password on an unofficial site, you run the risk of losing your account?<\/p>\n

Even worse is if the victim, asked for payment card details for \u201cverification,\u201d agrees. What happens next, you know only too well.<\/p>\n

How to get games risk-free<\/h2>\n

The risks gamers face are neither new nor particularly unusual. Although gamers appear to be a relatively risk-tolerant group, you can practice safe gaming by following some commonsense tips:<\/p>\n