ScarCruft Breaches Gaming Platform to Spread BirdCall Malware

Date:

Title: Hackers Compromise Video Game Platform in Targeted Malware Attack

By Ravie Lakshmanan | May 05, 2026

A North Korean hacking group, ScarCruft, has launched a malware attack targeting the video game platform sqgame[.]net, primarily used by ethnic Koreans in China. This supply chain attack involved embedding a backdoor named BirdCall into Android game downloads, significantly expanding its reach to mobile users.

The attack, reportedly ongoing since late 2024, affects users who download the compromised APKs, enabling hackers to capture sensitive information such as messages, call logs, and even record ambient audio. The campaign is particularly concerning as it targets North Korean defectors and activists.

To protect against this threat, users are advised to avoid downloading apps from unverified sources, keep software updated, and use reputable security solutions. Currently, the risk level of this malware attack is categorized as High, given its targeted nature and potential for widespread data theft.

Source: View Original Report

Share post:

spot_imgspot_img

Popular

More like this
Related

Critical PHP Object Injection Vulnerability Found in GiveWP Plugin

A recently discovered vulnerability in the GiveWP plugin poses...

AI Advances Strengthen Cybersecurity: Wordfence Unveils Critical Vulnerability Discovery

Wordfence has revealed significant advancements in its incorporation of...

Critical Unauthenticated Account Takeover Vulnerability Found in TranslatePress Plugin

On August 11, 2026, a significant security vulnerability was...

Hackers Target WordPress Sites in miniOrange Authentication Bypass Attacks

In recent weeks, hackers have escalated their attacks on...