Free game, mod, or crack? A wave of fake downloads is stealing gamers' passwords

Hunting for a free game, a mod, or a cracked copy of some pricey software? Slow down before you run that installer. Security researchers at Malwarebytes are tracking a busy campaign that buries a password-stealing program inside exactly those kinds of downloads.

Here's the trap. You land on a slick-looking game portal or file-sharing link, often after being bounced through a couple of lookalike pages. You download an archive, open the Setup.exe inside, and to you nothing happens - or a fake installer runs. Behind it, a multi-stage chain quietly unpacks and launches malware called Amatera Stealer. Once it's running, it scrapes the passwords and autofill data saved in your browser, your browser extensions, messaging apps, cryptocurrency wallets and files on your PC, then ships them off to the criminals. The people behind it lean on the urgency around free or hard-to-find downloads - the same pull that makes cracks and cheats tempting in the first place.

The safe habit is simple: get games and apps only from official stores and the developer's own site - Steam, the Microsoft Store, GOG, the real publisher. Pirated copies, "free" cheats and random mod sites are the whole delivery system here, and no amount of caution makes an unknown Setup.exe trustworthy.

If a stealer does slip through, the accounts saved in your browser are the first thing it grabs. Tendvane's Safety check flags unwanted and suspicious programs that have taken hold on your PC, so a bad install doesn't just sit there working quietly in the background.