Friday 6 November
Global

Your region, kept on this device.

BOINC

Product

Am I affected?

Checked against NVD affected-version data on our server. Nothing you type is stored.

Security timeline

  1. Malware reported by Cyber Security NewsMicrosoft warns fake game and cracked software installers secretly monetise Windows PCs
  2. Malware reported by CSO OnlineFake cracked-software installers secretly turn Windows PCs into proxy and computing nodes
  3. Malware reported by Cyber Security NewsFake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes
  4. Malware reported by Microsoft Security BlogFake download campaign uses trojanised installers to push monetisation software

Recent news

Cyber Security News·

Microsoft warns fake game and cracked software installers secretly monetise Windows PCs

Threat Intelligence reports a campaign using deceptive installers for games, cracked applications and utilities to deliver , CharityEngine with BOINC, and Advanced Windows Manager. WorldProxyPool shares the victim's bandwidth, while the computing branch uses the machine's resources, although cryptomining was not established. The installers use unattended options to reduce prompts, leaving unwanted software and background activity that can outlast the original download.

CSO Online·

Fake cracked-software installers secretly turn Windows PCs into proxy and computing nodes

has documented a campaign using trojanised Inno Setup-style installers that bundle several monetisation payloads in one session. These install proxyware such as WorldProxyPool, with SYSTEM-level scheduled tasks, and distributed-computing software such as , and VirtualBox, using bandwidth and CPU without informed consent.

Cyber Security News·

Fake software downloads secretly enlist Windows PCs in bandwidth sharing and computing schemes

researchers documented a campaign where fake installers for cracked software, games and plugins drop multiple payloads in one session. The branches install proxyware, CharityEngine and BOINC computing components, and utilities, with WorldProxyPool creating SYSTEM-level scheduled tasks for persistence.

Microsoft Security Blog·

Fake download campaign uses trojanised installers to push monetisation software

Microsoft Threat Intelligence has tracked a campaign that uses trojanised Inno Setup-style installers, distributed as fake downloads for cracked software, games, activators and utilities. A single installation can silently deploy several monetisation payloads, including proxy-network software, compute-sharing software and adware-style utilities. also creates recurring SYSTEM scheduled tasks for persistence.

Last updated 6 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake