Friday 6 November
Global

Your region, kept on this device.

VirtualBox

Product

Am I affected?

Checked against NVD affected-version data on our server. Nothing you type is stored.

Security timeline

  1. Malware reported by Cyber Security NewsMicrosoft warns fake game and cracked software installers secretly monetise Windows PCs
  2. Malware reported by CSO OnlineFake cracked-software installers secretly turn Windows PCs into proxy and computing nodes

Recent news

Cyber Security News·

Microsoft warns fake game and cracked software installers secretly monetise Windows PCs

Threat Intelligence reports a campaign using deceptive installers for games, cracked applications and utilities to deliver , CharityEngine with BOINC, and Advanced Windows Manager. WorldProxyPool shares the victim's bandwidth, while the computing branch uses the machine's resources, although cryptomining was not established. The installers use unattended options to reduce prompts, leaving unwanted software and background activity that can outlast the original download.

CSO Online·

Fake cracked-software installers secretly turn Windows PCs into proxy and computing nodes

has documented a campaign using trojanised Inno Setup-style installers that bundle several monetisation payloads in one session. These install proxyware such as WorldProxyPool, with SYSTEM-level scheduled tasks, and distributed-computing software such as , and VirtualBox, using bandwidth and CPU without informed consent.

Last updated 6 November 2026. Facts come from our own stories, NVD and CISA KEV, MITRE ATT&CK and Wikidata, each named beside the fact; the introduction, when there is one, is from Wikipedia. We never show company logos.

Report a mistake