Back Scworld

Vidar 2.0 malware campaign targets gamers for crypto and account theft | brief

Scworld • March 18, 2026

A new wave of cyberattacks is targeting online gamers, luring them with the promise of free cheats for popular games like Fortnite and Counter-Strike. Cybersecurity experts have identified a large-scale campaign distributing a dangerous infostealer known as Vidar 2.0 through platforms like GitHub and , with further coverage provided by HackRead.

The Vidar 2.0 campaign exploits gamers' desire for a competitive edge by hiding malicious links behind professional-looking images on GitHub. Victims are often directed to download cheats via Discord or , which require disabling antivirus software. This allows the malware to steal cryptocurrency wallets, login tokens for platforms like Steam and Discord, and server passwords from professional tools.

The malware is stealthier and faster due to a rewrite in C++ and operates on a malware-as-a-service model. It uses technical tricks like PowerShell scripts and Telegram bots for command and control, making detection difficult.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vidar Stealer 2.0 Spreads via Fake Game Cheats on GitHub and Reddit Acronis Threat Research Unit reported that the Vidar Stealer 2.0 is being distributed through hundreds of fake game cheat repositories on GitHub and targeted posts on Reddit. The malware masquerades as free cheating software for popular online games, luring gamers into downloading it. The campaign has been identified to target virtually every major online game title, with the number of malicious repositories potentially reaching into the thousands. Attackers promote these cheats in Discord communities dedicated to gaming, exploiting the willingness of users to bypass security warnings. The malware, once installed, can extract sensitive information such as browser credentials and cookies. The first-stage payloads are disguised as game cheats and are executed through a multi-stage infection process. The malicious software connects to known command-and-control infrastructure, indicating a coordinated effort by the same threat actors. The report emphasizes the novelty of the delivery method for Vidar 2.0, marking a significant evolution in its distribution tactics. 3 sources 65

Extracted Entities

Vidar 2.0 malware campaign targets gamers for crypto and account theft | brief

The full story

Extracted Entities

Attack Types (1)

Campaigns (1)

Malware (1)

MITRE ATT&CK (3)

Platforms (4)

Tools (1)