11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware

Gbhackers •Mayura Kathir • July 15, 2026

11 malicious NuGet packages masquerading as game cheats, automation bots, and management “panels” that deploy a Windows payload called pepesoft.exe. The packages were published as .NET command-line tools, enabling users to install them through the dotnet tool install workflow and execute bundled commands such as throne-run. The affected packages target communities around Albion Online, GTA5RP, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malicious NuGet Packages Deploy Windows Surveillance Malware to Gamers Eleven malicious NuGet packages disguised as game cheats and automation tools have been identified, deploying a Windows payload known as pepesoft.exe. These packages target gaming communities, particularly for titles like Albion Online and GTA5RP. Once installed, they provide attackers with remote access to victims' PCs, allowing for live screenshot capture and other surveillance activities. The attack method exploits the .NET command-line tool installation process, making it easy for users to inadvertently execute the malicious code. The scope of the impact includes multiple gaming communities, with significant risks to user privacy and system security. Currently, there are no specific CVEs associated with these packages, but the threat is active and ongoing. Users are advised to avoid downloading unofficial game-related packages. 2 sources 66

Extracted Entities

11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (2)

Platforms (2)

Tools (1)