Marsalek
Latest
Fake game cheats hide Marsalek malware that steals passwords and crypto wallet data
McAfee Labs identified Marsalek, a malware-as-a-service platform that ran from about December 2025 to May 2026 and let anyone build infections and track victims on a dashboard. Fake cheats for Roblox, Fortnite, Minecraft and Counter-Strike 2 start a multi-stage chain that adds Microsoft Defender exclusions and ends with the PureLog stealer, which targets browsers, Discord, Telegram and crypto wallets. McAfee counted more than 1,560 registered accounts and over 400 malicious files.
Marsalek infostealer spread via fake game cheats and utilities
Marsalek is a free malware-as-a-service platform that packaged infostealers as game cheats and utilities for Roblox, Fortnite, Counter-Strike 2, Minecraft and Grim Dawn. Researchers counted over 1,560 registered accounts, more than 400 malicious files and over 29 distribution URLs, active from mid-December 2025 to late May 2026. The campaign is aimed at stealing browser passwords and cookies, and its dashboard let users build their own payloads.