Malware Campaign Targets Roblox and Minecraft Users with Sophisticated Stealer
A new malware campaign is targeting players of popular games like Roblox and Minecraft by disguising itself as an 'undetected' version of the Xeno Roblox script executor. Promoted through gaming forums and Discord communities, the malware launches a multi-stage Java infection chain that mimics legitimate files and directories. The final payload is a sophisticated stealer and remote access trojan capable of stealing browser cookies, Discord, Roblox, and Minecraft accounts, as well as cryptocurrency-wallet data and payment information. The malware can also record keystrokes, access webcams, stream desktops, manipulate files, and execute commands, giving attackers interactive control over infected computers. This campaign, previously documented as Powercat, remains under active development with newly identified command-and-control infrastructure and expanded functionality. 
