Godot Game Engine Exploited for Cross-Platform Malware Attacks
TL;DR
Check Point Research has identified a new malware delivery technique exploiting the Godot Engine, an open-source game development platform, to execute malicious GDScript code. This method, used by the GodLoader malware, has infected over 17,000 machines since June 2024 and remains undetected by most antivirus engines. Distributed via the Stargazers Ghost Network on GitHub, this technique targets multiple platforms, including Windows, macOS, and Linux, posing a significant threat to users of Godot-developed games.
- Gaming Engines: An Undetected Playground for Malware Loaders Check Point Research
- Hackers abuse popular Godot game engine to infect thousands of PCs BleepingComputer
- Cybercriminals Exploit Popular Game Engine Godot to Distribute Cross-Platform Malware The Hacker News
- Cybercriminals used a gaming engine to create undetectable malware loader Help Net Security
- New Stealthy GodLoader Malware Attacking Windows, macOS, Linux, Android, & iOS Devices CybersecurityNews
Want the full story? Read the original reporting
Read on Check Point Research