Malware-Infected Fan-Made Super Mario Game Surfaces, Threatening PCs Globally
A wave of concern is currently surging through the gaming community as a popular fan-made Super Mario game is reported to be a vector for a significant malware attack. The fan game in question is Super Mario 3: Mario Forever, a free-to-play homage to the classic Nintendo game that was initially released in 2003 and has since been downloaded by millions of users worldwide.
Recently, cybersecurity firm Cyble discovered a modified version of the Super Mario 3: Mario Forever installer that has been trojanized by hackers. The researchers are unsure about the exact origin of the malware-laden versions of the game but suspect they may be distributed via gaming forums, which have historically been known to harbor such threats.
Once the trojanized version of the game is downloaded and extracted on a user’s PC, the archive releases three executables. One installs the actual game, while the other two, named “java.exe” and “atom.exe,” are installed in the user’s AppData directory without their knowledge.
The first of these additional executables is designed to mine for Monero cryptocurrency using the infected PC’s resources. The other, called “SupremeBot,” download a further payload dubbed “winme.exe” from a command and control (C&C) server controlled by the hackers.
This additional payload introduces the Umbral Stealer, an information-stealing malware that can pilfer passwords and cookies containing session tokens from your browser. It can also steal money from cryptocurrency wallets and authentication tokens for platforms like Discord, Minecraft, Roblox, and Telegram. The Umbral Stealer even has the ability to take screenshots of a Windows desktop and use your webcam to spy on you, all while avoiding detection by Windows Defender and impairing the effectiveness of antivirus software.
If you have recently downloaded Super Mario 3: Mario Forever, it’s recommended to give your computer a full malware scan and remove anything that your antivirus software identifies. It’s also suggested to reset all of your passwords. While individuals who downloaded the game in the past should be safe, running a quick scan is still a good idea.
As a general rule, gamers are advised to avoid downloading games from unofficial sources and to stick to well-known PC game platforms like Steam or the Epic Games Store. This incident serves as a stark reminder of the importance of staying vigilant and cautious in the digital world, particularly when dealing with fan-made adaptations of popular games.
