By using this site, you agree to the Privacy Policy and Terms of Use.
Accept
World of SoftwareWorld of SoftwareWorld of Software
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Search
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
Reading: Malware Hidden in Pirated Games Infects 400,000 Devices
Share
Sign In
Notification Show More
Font ResizerAa
World of SoftwareWorld of Software
Font ResizerAa
  • Software
  • Mobile
  • Computing
  • Gadget
  • Gaming
  • Videos
Search
  • News
  • Software
  • Mobile
  • Computing
  • Gaming
  • Videos
  • More
    • Gadget
    • Web Stories
    • Trending
    • Press Release
Have an existing account? Sign In
Follow US
  • Privacy
  • Terms
  • Advertise
  • Contact
Copyright © All Rights Reserved. World of Software.
World of Software > News > Malware Hidden in Pirated Games Infects 400,000 Devices
News

Malware Hidden in Pirated Games Infects 400,000 Devices

News Room
Last updated: 2026/02/07 at 12:14 AM
News Room Published 7 February 2026
Share
Malware Hidden in Pirated Games Infects 400,000 Devices
SHARE

A new strain of Windows-based malware has been circulating through pirated PC games and may have infected over 400,000 devices. 

Researchers at cybersecurity vendor Cyderes are warning about the threat, which has been hiding inside cracked games and modified game installers for franchises including Far Cry, Need for Speed, FIFA, and Assassin’s Creed.

The malware has been dubbed “RenEngine loader” because some of the malicious code has been embedded inside a legitimate Ren’Py launcher, an engine used to run visual novel games. “While these cracked games appear functional, they silently deliver embedded malware alongside the playable content,” the researchers wrote. 

The malware has been around since at least last April and remains active. Cyderes also uncovered evidence that the threat has infected over 400,000 victims globally because the malware was updated to include telemetry tracking data back in October. “The telemetry URL is embedded in the malware and can be reached whenever the malicious RenEngine loader executes,” the researchers added. 

(Credit: Cyderes)

The telemetry tracker shows the malware is usually logging about 4,000 to 10,000 visitors per day, with the highest concentration of victims observed in India, the United States, and Brazil, the company’s report adds. 

Top countries

(Credit: Cyderes)

Cyderes points to one site, “dodi-repacks[.]site,” for hosting the malware-laden game downloads. The domain has been previously flagged in other malware campaigns. 

pirated copies

(Credit: Cyderes)

The attack also leverages the Ren’Py launcher to archive the pirated game files. Executing the launcher decompresses the game files while secretly kicking off the malware’s installation. Cyderes spotted the RenEngine loader ultimately trying to deliver a Windows-based information stealer called ARC to harvest sensitive data from victim PCs, including “saved browser passwords, cookies, cryptocurrency wallets, and autofill information, along with system details and clipboard contents.”

Recommended by Our Editors

“In other similar scenarios, we observed different payloads such as Rhadamanthys stealer, Async RAT, and XWorm delivered via RenEngine Loader,” which can also steal passwords or enable a hacker to remote hijack the PC, Cyderes warned. 

How it works

(Credit: Cyderes)

Except for Avast, AVG, and Cynet, it appears that most antivirus engines currently don’t recognize the initial stage of the malware as a threat, according to Google’s malware-checking service VirusTotal. Affected users can consider using Windows’s System Restore or reinstalling the OS as a nuclear option if they suspect their PC contains malware.


Newsletter Icon

Newsletter Icon

Get Our Best Stories!

Stay Safe With the Latest Security News and Updates


SecurityWatch Newsletter Image

Sign up for our SecurityWatch newsletter for our most important privacy and security stories delivered right to your inbox.

Sign up for our SecurityWatch newsletter for our most important privacy and security stories delivered right to your inbox.

By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy
Policy.

Thanks for signing up!

Your subscription has been confirmed. Keep an eye on your inbox!

About Our Expert

Michael Kan

Michael Kan

Senior Reporter


Experience

I’ve been a journalist for over 15 years. I got my start as a schools and cities reporter in Kansas City and joined PCMag in 2017, where I cover satellite internet services, cybersecurity, PC hardware, and more. I’m currently based in San Francisco, but previously spent over five years in China, covering the country’s technology sector.

Since 2020, I’ve covered the launch and explosive growth of SpaceX’s Starlink satellite internet service, writing 600+ stories on availability and feature launches, but also the regulatory battles over the expansion of satellite constellations, fights with rival providers like AST SpaceMobile and Amazon, and the effort to expand into satellite-based mobile service. I’ve combed through FCC filings for the latest news and driven to remote corners of California to test Starlink’s cellular service.

I also cover cyber threats, from ransomware gangs to the emergence of AI-based malware. Earlier this year, the FTC forced Avast to pay consumers $16.5 million for secretly harvesting and selling their personal information to third-party clients, as revealed in my joint investigation with Motherboard.

I also cover the PC graphics card market. Pandemic-era shortages led me to camp out in front of a Best Buy to get an RTX 3000. I’m now following how President Trump’s tariffs will affect the industry. I’m always eager to learn more, so please jump in the comments with feedback and send me tips.

Read Full Bio

Sign Up For Daily Newsletter

Be keep up! Get the latest breaking news delivered straight to your inbox.
By signing up, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy. You may unsubscribe at any time.
Share This Article
Facebook Twitter Email Print
Share
What do you think?
Love0
Sad0
Happy0
Sleepy0
Angry0
Dead0
Wink0
Previous Article Best TV deal: TCL’s 98-inch QM6K mini LED TV is ,500 off Best TV deal: TCL’s 98-inch QM6K mini LED TV is $1,500 off
Next Article Report: SambaNova is raising 0M+ from Intel-backed consortium –  News Report: SambaNova is raising $350M+ from Intel-backed consortium – News
Leave a comment

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Stay Connected

248.1k Like
69.1k Follow
134k Pin
54.3k Follow

Latest News

Anker Soundcore P41i Review: Convenient Design, Incredible Battery Life
Anker Soundcore P41i Review: Convenient Design, Incredible Battery Life
News
Best AirTag deal: Get a pack of 2nd Gen Apple AirTags for their best price yet
Best AirTag deal: Get a pack of 2nd Gen Apple AirTags for their best price yet
News
Google says 1 billion Android users need to buy a new phone now
Google says 1 billion Android users need to buy a new phone now
News
5 TV Shows To Watch After Netflix’s Harlan Coben Series Run Away – BGR
5 TV Shows To Watch After Netflix’s Harlan Coben Series Run Away – BGR
News

You Might also Like

Anker Soundcore P41i Review: Convenient Design, Incredible Battery Life
News

Anker Soundcore P41i Review: Convenient Design, Incredible Battery Life

4 Min Read
Best AirTag deal: Get a pack of 2nd Gen Apple AirTags for their best price yet
News

Best AirTag deal: Get a pack of 2nd Gen Apple AirTags for their best price yet

4 Min Read
Google says 1 billion Android users need to buy a new phone now
News

Google says 1 billion Android users need to buy a new phone now

6 Min Read
5 TV Shows To Watch After Netflix’s Harlan Coben Series Run Away – BGR
News

5 TV Shows To Watch After Netflix’s Harlan Coben Series Run Away – BGR

9 Min Read
//

World of Software is your one-stop website for the latest tech news and updates, follow us now to get the news that matters to you.

Quick Link

  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact

Topics

  • Computing
  • Software
  • Press Release
  • Trending

Sign Up for Our Newsletter

Subscribe to our newsletter to get our newest articles instantly!

World of SoftwareWorld of Software
Follow US
Copyright © All Rights Reserved. World of Software.
Welcome Back!

Sign in to your account

Lost your password?