Powercat malware campaign: Fake game cheats deliver infostealer

In February 2026, an active malware delivery campaign named Powercat was observed distributing infostealer malware disguised as utility or cheat software for popular PC games including Roblox, Minecraft, and Grand Theft Auto V. The multi-stage infection chain begins with an initial executable that profiles victims and establishes persistence, followed by a Java-based loader that deploys the final infostealer payload. The malware targets cryptocurrency wallets (Exodus, Atomic, Monero-Gui), browser data from Chromium-based applications, Discord tokens, and gaming accounts with payment information. It includes surveillance capabilities such as keylogging, webcam capture, and screen recording. The campaign particularly targets children who frequent gaming platforms and pay-to-cheat websites, with evidence suggesting collected personal information may be used for blackmail or coercion into illegal activities.

• Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealerMalware2026-10-31
• September 2026 Infostealer Trend ReportMalware2026-10-28
• The Psychedelic Stealer: When the CAPTCHA Is the InstallerMalware2026-10-02
• Armorsteal Unpacked: Breaking Down a Python Malware Kit That Steals Data and Mines CryptoMalware2026-11-06
• Inside Phexia: A macOS malware delivered through ClickFixMalware2026-11-05