Fake Cheat for Popular Game Fortnite Hides Bitcoin-Targeting Malware

A supposed cheat for the massively popular video game Fortnite turns out to be malware designed to steal bitcoin wallet login details.

AccessTimeIconOct 5, 2018 at 1:30 p.m. UTC
Updated Sep 13, 2021 at 8:27 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

A supposed cheat for the massively popular video game Fortnite turns out to be malware designed to steal bitcoin wallet login details.

That's according to Malwarebytes Labs, which reported finding the malicious program on Oct. 2.

An investigation by the Califonia-based cybersecurity firm followed a trail from one of many dubious videos posted on YouTube that led to a "little slice of data theft malware disguised as a cheat tool," it said.

The YouTube account propagating the file via a URL in the description has over 700 subscribers, according to the report, while the video had been viewed over 2,200 times.

Once clicked, the link takes the visitor/potential victim to a page asking them to subscribe to the YouTube account, after which they are allowed to download the fake tool.

Malwarebytes writes:

"As far as the malicious file in question goes, at time of writing, 1,207 downloads had taken place. That's 1,207 downloads too many."

The team found that the malware was designed to steal data from users' PCs ranging from browser autocomplete text to Steam sessions, and ultimately sends the ill-gotten info to an I.P. address in the Russian Federation.

Of concern to cryptocurrency users, it also looks for data linked to bitcoin wallets – with one image provided in the report that shows the malware specifically seeks out data related to the Electrum wallet.

While the malware itself likely isn't new, the firm warns that it can still be damaging to those that install it.

"Combining it with the current fever for new Fortnite content is a recipe for stolen data and a lot of cleanup required afterward," the firm says.

Fortnite image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. In November 2023, CoinDesk was acquired by the Bullish group, owner of Bullish, a regulated, digital assets exchange. The Bullish group is majority-owned by Block.one; both companies have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary with an editorial committee to protect journalistic independence. CoinDesk employees, including journalists, may receive options in the Bullish group as part of their compensation.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.