LofyGang Resurfaces, Targets Minecraft Players with LofyStealer Malware

The Brazilian cybercrime group LofyGang has re-emerged after a three-year hiatus, launching a new campaign aimed at Minecraft players. According to The Hacker News, the group is deploying a novel information stealer dubbed LofyStealer (also known as GrabBot). This malware is meticulously disguised as a Minecraft hack called ‘Slinky,’ leveraging the official game icon to trick users into executing it voluntarily.

This isn’t just a simple game hack; it’s a sophisticated play for credentials and sensitive data. The Hacker News reports that LofyStealer focuses on exfiltrating credentials, potentially from gaming accounts, social media, and other services linked to the compromised device. The re-emergence of LofyGang underscores a persistent threat where attackers exploit popular platforms and user trust to achieve their objectives.

Attackers consistently target widely-used platforms, especially those with younger user bases who might be less security-aware. The attacker’s calculus here is clear: high volume, low friction. Disguising malware as a game utility is a classic social engineering tactic that continues to yield results. Defenders, particularly parents and IT professionals in educational settings, need to recognize that gaming platforms are not immune from serious threats.