Fake game cheats hide Marsalek malware that steals passwords and crypto wallet data
MALWAREMicrosoft Defenderredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
McAfee Labs identified Marsalek, a malware-as-a-service platform that ran from about December 2025 to May 2026 and let anyone build infections and track victims on a dashboard. Fake cheats for Roblox, Fortnite, Minecraft and Counter-Strike 2 start a multi-stage chain that adds Microsoft Defender exclusions and ends with the PureLog stealer, which targets browsers, Discord, Telegram and crypto wallets. McAfee counted more than 1,560 registered accounts and over 400 malicious files.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Download games and tools only from official sources.
- Never turn off antivirus because a site claims a file is a false alarm.
- Never paste commands from a web page into Windows.
- If a suspicious cheat was run, change passwords from a clean device, sign out of all sessions, move crypto to a new wallet, and reinstall Windows.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Malware
Companies
Products