LofyGang returns: LofyStealer posing as 'Slinky' cheat attacks Minecraft

Colleagues, note: Brazilian group LofyGang has resumed a campaign against Minecraft players after three years.

ZenoX reports attackers distribute a 'Slinky' cheat with an official badge to prompt installation. A JavaScript loader deploys chromelevator.exe in memory and steals cookies, passwords, tokens, bank cards and IBANs from major browsers; data is exfiltrated to 24.152.36.241.

Previously the group used npm typosquatting and Discord token theft; it now operates as MaaS with a Slinky Cracked builder.

Why this matters: attackers exploit trust in gaming communities and GitHub—routine downloads can cause data leaks.

How do you protect gaming accounts and developers from such lures?

#cybersecurity #infostealer #GitHub #supplychain