ASEC cybersecurity analysts have discovered hidden malware in a Pokémon NFT game.
Definitely, scams are on the rise for NFT games. While American youtuber Logan Paul is still trying to get out of the CryptoZoo case, another scam is pointed out. AhnLab Security Emergency Response Center (ASEC) experts so just pinned the site pokemon-go.io.
As its name suggests, the website relies on the Pokémon franchise to increase its popularity and attract Internet users. To be exact, it offers its users the ability to play, trade, and invest in Pokemon cards. Which are actually NFTs. The problem is that a malicious program hides in the game’s installation file.
Titled NetSupport RAT, the malware infiltrates victims’ devices the moment users click the “Play on PC” command. Indeed, instead of the Pokémon game, Internet users download the malware. Which then makes its way to the Windows APPDATA folder. This is where the trouble begins. As a reminder, NetSupport is a lambda application that allows you to control a device remotely. However, accompanied by the RAT malware, the installation therefore allows hackers to take control of the infected PC.
In effect, the criminals not only control the screen, but also certain system functions. According to ASEC analysts, this includes “screen capture, clipboard sharing, collecting web history information, file management, and running commands”. In other words, the hackers have free rein to extort some critical information from the user. Not to mention that they can also install other malware in addition.
We can never repeat it enough: caution is the Internet user’s best ally. When installing external software, priority should be given to official sites to avoid unpleasant surprises. Better to avoid cracks, which are otherwise illegal, and be suspicious of suspicious emails that invite you to download attachments.
_
Follow Geeko on Facebook, Youtube et Instagram so you don’t miss any news, tests and tips.