conv.

← The whole story
Security
Fake PS5 emulators on GitHub spread password-stealing malware

NordVPN identifies malware in fake PS5 emulator repositories

1 Oct 28 1:10 PM · 14d ago · 1 article · 1 source · development 1 of 6

NordVPN's Threat Intelligence team discovered that malicious GitHub repositories disguised as legitimate PS5 emulators (Kyttyps5 and AnyPS5) contain password-stealing malware. The malware adds exclusion rules to Microsoft Defender, deploys an infostealer executable, and runs a cleanup script to erase itself.

NordVPN identifies malware in fake PS5 emulator repositories
engadget.com

“Emulation fans are a perfect target. They are used to downloading experimental software from GitHub and running unsigned files, so nothing about this feels suspicious. But this is not an emulator.”

Marijus Briedis, NordVPN CTO

NordVPN Threat Intelligence team Cybersecurity researchersMarijus Briedis NordVPN CTOSony Gaming company

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 10 pieces in 4h at Oct 29, 4 AM; 19 pieces over 15 days (14 articles · 5 posts) Oct 28, 12 PM — 1 piece · 1 article — Newswires 1Oct 28, 4 PM — quietOct 28, 8 PM — quietOct 29, 12 AM — 2 pieces · 2 posts — Reddit 1, Mastodon 1Oct 29, 4 AM — 10 pieces · 9 articles · 1 post — Google News 7, Newswires 2, Mastodon 1Oct 29, 8 AM — 2 pieces · 2 posts — Mastodon 2Oct 29, 12 PM — 4 pieces · 4 articles — Google News 4Oct 29, 4 PM — quietOct 29, 8 PM — quietOct 30, 12 AM — quietOct 30, 4 AM — quietOct 30, 8 AM — quietOct 30, 12 PM — quietOct 30, 4 PM — quietOct 30, 8 PM — quietOct 31, 12 AM — quietOct 31, 4 AM — quietOct 31, 8 AM — quietOct 31, 12 PM — quietOct 31, 4 PM — quietOct 31, 8 PM — quietNov 1, 12 AM — quietNov 1, 3 AM — quietNov 1, 7 AM — quietNov 1, 11 AM — quietNov 1, 3 PM — quietNov 1, 7 PM — quietNov 1, 11 PM — quietNov 2, 3 AM — quietNov 2, 7 AM — quietNov 2, 11 AM — quietNov 2, 3 PM — quietNov 2, 7 PM — quietNov 2, 11 PM — quietNov 3, 3 AM — quietNov 3, 7 AM — quietNov 3, 11 AM — quietNov 3, 3 PM — quietNov 3, 7 PM — quietNov 3, 11 PM — quietNov 4, 3 AM — quietNov 4, 7 AM — quietNov 4, 11 AM — quietNov 4, 3 PM — quietNov 4, 7 PM — quietNov 4, 11 PM — quietNov 5, 3 AM — quietNov 5, 7 AM — quietNov 5, 11 AM — quietNov 5, 3 PM — quietNov 5, 7 PM — quietNov 5, 11 PM — quietNov 6, 3 AM — quietNov 6, 7 AM — quietNov 6, 11 AM — quietNov 6, 3 PM — quietNov 6, 7 PM — quietNov 6, 11 PM — quietNov 7, 3 AM — quietNov 7, 7 AM — quietNov 7, 11 AM — quietNov 7, 3 PM — quietNov 7, 7 PM — quietNov 7, 11 PM — quietNov 8, 3 AM — quietNov 8, 7 AM — quietNov 8, 11 AM — quietNov 8, 3 PM — quietNov 8, 7 PM — quietNov 8, 11 PM — quietNov 9, 3 AM — quietNov 9, 7 AM — quietNov 9, 11 AM — quietNov 9, 3 PM — quietNov 9, 7 PM — quietNov 9, 11 PM — quietYesterday, 3 AM — quietYesterday, 7 AM — quietYesterday, 11 AM — quietYesterday, 3 PM — quietYesterday, 7 PM — quietYesterday, 11 PM — quietToday, 3 AM — quietToday, 7 AM — quietToday, 11 AM — quietToday, 3 PM — quietToday, 7 PM — quiet 12–6
1NordVPN identifies malware in fake PS5…2–6IGN warns of scammers exploiting PS5…
Oct 29Oct 31Nov 2Nov 4Nov 6Nov 8now · 11:36 PM ET

All 6 developments of Fake PS5 emulators on GitHub spread password-stealing… →

NewswiresMastodonRedditGoogle News