Minecraft Players Targeted by LofyStealer Using Node.js Loader and In

Cybersecuritynews •Tushar Subhra Dutta • April 29, 2026

A dangerous infostealer malware called LofyStealer is actively targeting Minecraft players by disguising itself as a game cheat tool named “Slinky.” The malware runs a two-stage attack that quietly steals sensitive data from popular web browsers while staying largely hidden from standard security software installed on the victim machine. The campaign is notably more sophisticated […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LofyStealer Malware Targets Minecraft Players with Node.js Loader A new infostealer malware named LofyStealer is targeting Minecraft players by masquerading as a cheat tool called 'Slinky.' This malware, linked to the Brazilian cybercrime group LofyGang, employs a Node.js-based loader and an in-memory C++ payload to conduct a two-stage attack. It stealthily extracts sensitive data from popular web browsers and sends it to a command-and-control (C2) server. The campaign is sophisticated, evading detection by standard security software. Victims are primarily gamers who unknowingly download the malicious tool. The attack's scope is concerning, given the popularity of Minecraft and the potential for widespread data theft. Currently, the malware is active and poses a significant risk to affected users. 3 sources 67

Extracted Entities

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Malware (1)

MITRE ATT&CK (1)

Tools (2)