ScarCruft

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

ESET researchers have uncovered a supply-chain attack in which the ScarCruft APT group compromised a gaming platform to distribute backdoor-infected games targeting the Yanbian region. The attack leveraged both Windows and Android gaming applications as vectors to deliver malicious payloads to victims. This campaign demonstrates how threat actors continue to exploit legitimate software distribution channels to establish persistent access in geographically targeted operations.