Morphisec warns StealC V2 malware spread through weaponized blender files

Morphisec has reported that Russian threat actors are distributing the StealC V2 malware through weaponized Blender files on 3D model sites like CGTrader. This malware exploits Blender's capability to run hidden Python scripts, allowing attackers to implant malicious .blend files that execute upon opening. The campaign has been active for at least six months, with Morphisec successfully thwarting several attempts.

The updated StealC V2 variant enhances its theft capabilities, targeting over 23 browsers and various messaging and VPN applications. Users are advised to keep the 'Auto Run Python Scripts' feature disabled unless the source is trusted to avoid infection.