CGTrader — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
November 24, 2025
Last Seen
December 10, 2025

CGTrader is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.

CGTrader is a technology platform tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed November 24, 2025; most recent activity December 10, 2025.

Related Threat Clusters

  • StealC Malware Spread via Malicious Blender 3D Model Files

    A Russian-linked campaign is distributing the StealC V2 infostealer malware through malicious Blender 3D model files uploaded to marketplaces like CGTrader. This malware exploits Blender's ability to execute Python…

    2 articles · Updated December 10, 2025

Recent Intelligence Reports

  • A stealer hiding in Blender 3D models — Kaspersky · December 10, 2025
  • Malicious Blender model files deliver StealC infostealing malware — Bleepingcomputer · November 24, 2025

Frequently asked questions

What is CGTrader?

CGTrader is a technology platform tracked by ThreatCluster, appearing in 1 threat cluster built from 2 intelligence report mentions.

Is CGTrader still active?

The most recent intelligence report mentioning CGTrader on ThreatCluster is dated December 10, 2025. Activity was first observed November 24, 2025, giving a tracked span from then to December 10, 2025.

What is CGTrader associated with?

Across ThreatCluster reporting, CGTrader most frequently co-occurs with Malware, StealC, T1059.001 - PowerShell, T1059.006 - Python, Blender, among 9 tracked related entities.

What are the latest developments involving CGTrader?

The most significant recent cluster is “StealC Malware Spread via Malicious Blender 3D Model Files” (2 articles · Updated December 10, 2025). CGTrader appears across 1 threat cluster in total, listed above with sources.

How much reporting does ThreatCluster have on CGTrader?

CGTrader appears in 2 intelligence report mentions across 1 deduplicated threat cluster, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown