There are reports of a new surge in unidentified malware targeting video gamers, aiming to steal their Bitcoin wallets in a campaign that also targets cheaters. According to vx-underground, a repository for malware information, this threat actor is using malware to pilfer login and other credentials from users of pay-to-cheat video game software.

The attacks have affected players who purchase cheating software, compromising over 4.9 million accounts for Activision Blizzard users, its game store Battle.net, as well as accounts for Elite PVPers and cheat software markets PhantomOverlay and UnknownCheats.

Affected users have reported their Electrum BTC wallets being drained, although the exact amount stolen is unknown. PhantomOverlay disputed the inflated number of hacked accounts, attributing it to invalid logins in the database it accessed.

The malware appears to originate from widely used gaming software, posing the largest infostealer malware campaign in gaming and cheating community history. Despite efforts to trace its origin, the malware gang has made it challenging to pinpoint.

Activision Blizzard is aware of the situation and is collaborating with cheat-selling sites to assist affected users, emphasizing the importance of user password changes for account security. They maintain that their servers are secure and uncompromised.

PhantomOverlay noticed fraudulent activity on user accounts, prompting them to alert victims and identify further affected individuals.