ESET researchers have discovered a new, insidious malware called Joao, which spreads via online games published on untrusted websites. Joao is a modular malware capable of downloading and executing other malicious code.
"To spread the Joao malware, its creators have abused massively multiplayer online role-playing games. They modified them so that they can download even more malware," explains Tomáš Gardoň, Malware Analyst at ESET.
ESET's research showed that the creators of the malicious campaign abused several game titles from the company Aeria Games, publishing modified versions of them on various, invalid websites. Among them, one managed to remain active in spreading the malicious software, gf.ignitgames[.]to, however ESET's security solutions managed to block it.
The games that contained Joao could gather information about the compromised computer and then download additional data that the C&C server sent. ESET researchers discovered during their investigation that Joao had capabilities for backdoor attacks, espionage and DDoS.
"The infection process is well disguised to fool victims, and these modified games work according to their creators' plan. Once the player is fooled and proceeds to download the modified game, there is no evidence to raise their suspicions. Those who are not protected by a reliable security solution simply end up with infected computers," warns Gardoň.
More details about the Joao malware – how it works, how it is detected, and how to remove it – can be found in the relevant article by Tomáš Gardoň on the ESET blog, WeLiveSecurity.com.
Also, ESET experts have compiled a series of tips to help gamers enjoy their games without the risk of threats, some of which are:
- Prefer official sources whenever possible.
- Make sure games have the latest updates.
- Use a reliable security solution and keep it active while you play.
- Remember that there are other threats you need to guard against.
Even more security tips for gamers from ESET here.
