Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

Brazilian cybercrime group LofyGang has resurfaced after three years with LofyStealer, a new malware disguised as a Minecraft hack called 'Slinky' targeting young players.

• •The malware deploys chromeleveler.exe via a JavaScript loader and harvests sensitive data including passwords, cookies, tokens, cards, and IBANs from major browsers like Chrome, Edge, and Firefox
• •Stolen data is exfiltrated to a C2 server located at 24.152.36.241
• •The group has shifted from NPM package typosquatting and Discord token theft to a malware-as-service model with Slinky Cracked builder
• •The campaign demonstrates how attackers increasingly abuse trusted platforms like GitHub and YouTube to host malicious repositories and distribute various stealer malware families

This summary was automatically generated by AI based on the original article and may not be fully accurate.