Hidden Danger in 3D: Malicious Blender Files Unleash StealC V2 Infostealer

Morphisec has issued a critical alert about a sophisticated malware campaign targeting 3D artists and developers through malicious Blender files. The StealC V2 infostealer is delivered via compromised 3D model files, exploiting Blender's ability to run embedded Python scripts. Users unknowingly download these files, which execute malware if 'Auto Run Python Scripts' is enabled.

The malware, linked to Russian-speaking threat actors, initiates a multi-stage infection process, stealing sensitive data from browsers, crypto wallets, and applications. The best defense is to disable the auto-run feature in Blender unless the source is trusted.