Official Game Installs Malware

A supply chain attack on the indie game 'Night Abyss' delivered the Umbral Stealer, an open-source info stealer written in C that exfiltrates browser cookies and credentials via Discord webhooks. The malware bypasses 2FA by stealing active session cookies, potentially compromising all online accounts. The game developer downplayed the incident as an 'abnormal login.' The post explains how the stealer works, why gamers are high-value targets, and advises affected users to wipe their systems and reset all credentials. Windows Defender has a detection signature, but antivirus evasion remains trivial. The video is sponsored by ANY.RUN sandbox, which now supports macOS analysis.