What is the RenEngine loader malware?

The RenEngine loader is a new strain of malware embedded in pirated PC games that infects devices and steals sensitive data.

How many devices have been infected by the RenEngine loader?

Researchers estimate that over 400,000 devices have been infected globally by the RenEngine loader malware.

What kind of data does the RenEngine loader steal?

The RenEngine loader is capable of stealing sensitive information such as saved browser passwords, cryptocurrency wallets, and other system details.

Home / Technology / Pirated Games Unleash Hidden Malware Threat

Pirated Games Unleash Hidden Malware Threat

7 Feb

•

Summary

Malware hidden in pirated games has infected over 400,000 devices globally.
The RenEngine loader steals passwords, cryptocurrency, and browser data.
Antivirus detection remains low for this new, evolving threat.

Pirated Games Unleash Hidden Malware Threat

A significant cyber threat is actively circulating within pirated PC games, having already compromised an estimated 400,000 devices globally. Cybersecurity researchers have identified this malware, named the RenEngine loader, as being embedded within cracked game installers for popular franchises such as Far Cry, Need for Speed, FIFA, and Assassin's Creed. These compromised game files, often downloaded from sites like dodi-repacks[.]site, appear functional but secretly install malware.

The RenEngine loader has been active since at least April of the previous year. By October, it was updated with telemetry tracking, allowing researchers to monitor its reach. The telemetry data indicates daily infections ranging from 4,000 to 10,000 victims, with a notable concentration in India, the United States, and Brazil. The malware's ultimate goal is to deliver information-stealing payloads like ARC, which targets saved browser passwords, cryptocurrency wallets, and system details.