A stealer hiding in Blender 3D models | Kaspersky official blog
Source Kaspersky Security Blog
Description
Researchers have uncovered a campaign where free 3D models for Blender with embedded Python scripts are being used to distribute the StealC V2 infostealer.
Impact
For European organizations, especially those in creative industries, media production, architecture, and visualization sectors that commonly use Blender, this threat poses a significant risk of data theft and operational compromise. The StealC infostealer’s ability to harvest credentials, browser data, crypto wallets, and communications can lead to intellectual property theft, financial fraud, and exposure of sensitive corporate information. The attack can also facilitate lateral movement within networks if attackers leverage stolen credentials. Since the infection vector is embedded in freely available 3D models, employees downloading unvetted content can inadvertently compromise corporate devices. This risk is exacerbated in organizations without strict software usage policies or security awareness training. The stealthy nature of the attack, leveraging legitimate automation features, complicates detection and response. Additionally, the use of cloud-based infrastructure for payload delivery can bypass traditional network defenses. Overall, the threat can result in confidentiality breaches, loss of trust, regulatory penalties under GDPR, and financial losses.
Defensive guidance
European organizations should immediately disable Blender’s Auto Run Python Scripts feature to prevent automatic execution of embedded scripts. Security teams must implement strict policies prohibiting the use of unapproved third-party tools and content, including 3D models from untrusted sources. Conduct thorough risk assessments before adopting new software or content platforms. Deploy endpoint detection and response (EDR) solutions capable of monitoring script execution and PowerShell activity to detect suspicious behaviors. Regularly train employees on the risks of downloading and opening files from external marketplaces, emphasizing the dangers of automation features. Enforce application whitelisting and restrict PowerShell execution policies to limit malware execution. Integrate sandboxing or file scanning solutions that can analyze 3D model files and embedded scripts before use. Maintain up-to-date threat intelligence feeds to monitor emerging campaigns targeting creative software. Finally, ensure multi-factor authentication and network segmentation to limit damage from credential theft.
References
Community reviews
Related threats
- Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooksHighVulnerability
- CVE-2026-115419: multiagent-a2a · Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerHighVulnerability
- LiteLLM supply chain compromiseCampaign
- CVE-2026-110248: Insertion of sensitive information into log files in Amazon SageMaker Python SDKHighVulnerability
- SAP warns of maximum severity OAuth2 SSRF security flawHighVulnerability