Home / Technology / Trojan NuGet Package Rigged Online Casino Games
Trojan NuGet Package Rigged Online Casino Games
23 Jul
Summary
- A trojan NuGet package mimicked a legitimate library to target Digitain's backend.
- The malware rigged crash-game outcomes using insider knowledge of the codebase.
- Attackers remain unidentified, but an insider threat is highly suspected.
Security researchers have identified a novel trojan package, dubbed Newtonsoftt.Json.Net, which targeted the backend systems of Digitain, an online gaming software provider. This malicious package masqueraded as the legitimate and widely-used Newtonsoft.Json library for .NET applications. Its insidious design allowed it to function normally for most users while specifically targeting Digitain's crash-game operations.
Upon infection within Digitain's environment, the malware altered the game's outcome by substituting fair results with rigged numbers based on the date and time. This enabled attackers to anticipate and capitalize on manipulated rounds. The malware also established a private channel to verify the effectiveness of its cheat codes. Researchers strongly suspect an insider threat due to the exploit's reliance on specific internal function knowledge within Digitain's game engine.
JFrog reported the vulnerability to Digitain on July 7, 2026. The company acknowledged the issue and confirmed it had been escalated and subsequently fixed within two days. The identity of the attackers, however, remains unknown.
