Likely created with AI-generated code: This massive vibe-coded campaign uses 1,700+ fake filenames to inject malware into your favorite game mods and apps

Date:
Mon, 23 Mar 2026 17:00:00 +0000

Description:
Cryptojackers are being distributed through fake software, VPNs, game mods, and more.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news
and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are now subscribed Your newsletter sign-up was successful An account already exists for this email address, please log in. Subscribe to our newsletter McAfee uncovers GenAI-powered cryptojacking campaign Fake apps spread ~50 variants via 1,700+ archives on Discord, SourceForge, and more Attackers mine Monero, Ravencoin, Zephyr, and others; profits estimated at $13,500+ Security researchers McAfee uncovered a major malware campaign leveraging Generative Artificial Intelligence (GenAI) to infect as many people with cryptocurrency miners as possible.

In an in-depth report published last week, the cybersecurity outfit explained that someone has been creating fake software: AI image generators, voice-changing tools, stock-market trading utilities, game mods, VPNs , and more. They discovered almost 50 different variants, being distributed in more than 1,700 .ZIP archives. These variants have not been entirely vibe-coded, but parts seem to have been generated with AI: The presence of explanatory comments and structured sections strongly indicates the use of LLM models to generate this code, McAfee explained. The attackers are most likely using AI to speed up the process, scale the campaign, and diversify the code in order to better bypass anti-virus and anti- malware solutions. Article continues below You may like Fake Moltbot AI assistant just spreads malware - so AI fans, watch out for scams More AI malware has been found - and this time, crypto developers are under attack Watch out - this devious new Android malware clicks on hidden browser ads to put you at risk Mining Bitcoin, Monero, and others These tools are being distributed through various legitimate content delivery network (CDN) services and file-hosting websites, including Discord, SourceForge, FOSSHub, and MediaFIre. McAfee also mentioned mydofiles[dot]com. So far, the researchers discovered more than 100 URLs actively spreading the malware - with the majority (61) found on Discord. There were 17 on SourceForge, and 15 on mydofiles[dot]com.

The victims are being infected with so-called cryptojackers. These are programs that hijack the device to mine various cryptocurrencies for the attackers. The most popular cryptojacker out there is called XMRig, which is often found on servers in data centers, and which mines the privacy-oriented token, Monero.

In this case, the attackers are mining other coins as well, including Ravencoin, Zephyr, Bitcoin Gold, Ergo, and Clore.

McAfee found the wallet address for Bitcoin and discovered that the attackers made at least $4,500 that way. Since most of the mining activity targets privacy-focused cryptocurrencies such as Zephyr, Ravencoin and Monero, the real financial impact is likely to be nearly double the amount identified through Bitcoin tracing alone, the researchers concluded, hinting that the attackers made at least $13,500 so far. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me
with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. The
best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.



======================================================================
Link to news story: https://www.techradar.com/pro/security/likely-created-with-ai-generated-code-t his-massive-vibe-coded-campaign-uses-1-700-fake-filenames-to-inject-malware-in to-your-favorite-game-mods-and-apps


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)