StaryDobry Campaign: Trojanized Games Fuel a Global Cybercrime Wave

Amber | Attack Report
Download PDF

A large-scale malware campaign, dubbed “StaryDobry,” has been spreading trojanized versions of cracked games to unsuspecting gamers worldwide. Games such as Garry’s Mod, BeamNG.drive, and Dyson Sphere Program have been weaponized to distribute the XMRig cryptominer, impacting both individual users and businesses. This previously unidentified threat actor has been actively targeting users across multiple countries, including Russia, Brazil, Germany, Belarus, and Kazakhstan. By leveraging torrent sites as the primary distribution channel, the attackers have been able to infect a wide range of victims looking for pirated software. Once installed, the cryptominer covertly hijacks system resources to mine cryptocurrency, degrading performance while generating illicit profits for the attackers.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox