Super Mario: Windows users may have a Super Mario ‘problem’ – Times of India

Hackers are targeting gamers by infecting their Windows systems via a trojansed installer in the popular Super Mario 3: Mario Forever game. The game has a wide user base and users generally trust game installers as legitimate software, cybersecurity company Cybil said.
It said that due to the large file size and games’ complexity, threat actors are able to hide malware within them.These malware, which are distributed through game installers, can steal sensitive information and can be used for carrying out ransomware attacks.
Super Mario 3: Mario Forever is a free-to-play remake of the classic Nintendo game launched in 2003.”Super Mario is an extremely popular video game franchise celebrated for its platforming gameplay, vibrant visuals, unforgettable characters, and captivating music. The franchise recently saw a resurgence in popularity with new games and an animated movie,” the firm said.
Gamers on target
According to the researchers, hackers are distributing a modified sample of the Super Mario 3: Mario Forever installer and are likely promoting the infected game on forums or social media groups.
Once installed in the victim’s computer, the three different malware components connect the machine with Command and Control Infrastructure (C2) to transmit information and receive mining configuration. The stealer component then steals data from the infected Windows PC.

The stolen data could include information stored in web browsers, like passwords, cryptocurrency wallets and credentials for websites. The cybersecurity firm also says that the info-stealer malware is capable of evading Windows Defender by disabling the program.
How to protect
If you have downloaded Super Mario 3: Mario Forever, you should immediately scan your system computer for installed malware. If a malware is detected, remove it and reset passwords of sites such as banking, cryptocurrency and email sites.
It is worth noting that one should always download games or software from official websites or trustworthy platforms. Scan files before running them on the computer.