[Warning]: Super Mario 3: Mario Forever game contains Trojan, crypto stealer

[Dave1]

Anyone downloaded Super Mario 3: Mario Forever game for Windows?

If yes, then your crypto accounts are in danger right now, as the downloader has a trojan in it.

It comes in 3 executables:

Code:

 super-mario-forever-v702e.exe
java.exe
atom.exe 

Once it has been installed, it will executes them to run an XMR (Monero) miner and a SupremeBot mining client. But not only that, they've used what is commonly known as Umbral Stealer, take advantage of that program,

This stolen data includes information stored in web browsers, like stored passwords and cookies containing session tokens, cryptocurrency wallets, and credentials and authentication tokens for Discord, Minecraft, Roblox, and Telegram.

The game itself is being propagated thru gaming forums, so most likely it might have been downloaded thousand times already. And if you think you are a victim, then

- Users need to monitor their system performance and CPU usage regularly.

- Installing a reputable antivirus and internet security software package on all connected devices, including PCs, laptops, and mobile devices, is highly recommended.

- Scan your PC for any malware and remove it if detected.

- To ensure your safety, reset your passwords for sensitive accounts such as banking, financial, cryptocurrency, and email.

- Use a unique password for each account and store it in a password manager for added security.

- When downloading games or any software, only from official sources like the publisher’s website or trustworthy digital content distribution platforms.

- Always scan any downloaded executables with your antivirus software before launching them and ensure that your security tools are up-to-date.

https://www.bleepingcomputer.com/news/security/trojanized-super-mario-game-used-to-install-windows-malware/
https://gridinsoft.com/blogs/trojanized-version-super-mario-malware/

[1714554901]

1714554901

[1714554901]

1714554901

[BlackBoss_]

Anyone downloaded Super Mario 3: Mario Forever game for Windows?

If yes, then your crypto accounts are in danger right now, as the downloader has a trojan in it.

Downloading causes security problems again but it is not surprising many warnings about careful downloading activity.

People just ignore warnings, being careless because they want to explore new things, new games, new products and ignore all security advice. Not only games but also many applications on mobile or softwares on computers or laptops, they don't stop a few seconds for thinking about security risk.

Thank you for this information but again, many people will forget about the security advice very quickly. They are app-enthusiasts.

[Cantsay]

This news has been flooding my news feed lately but I just decided to pay a deaf ear to it thinking that no one here in bitcointalk still plays Super Mario 3 as the name sounds old to me or maybe this is a newly released version.

The part of the article that got me is the fact that it does not only hijack your wallet but also installs a "crypto mining software".

The game itself is being propagated thru gaming forums, so most likely it might have been downloaded thousand times already.

According to decrypt.co they already have nearly 17 million downloads.
Just imagine 17 million laptops or desktops being utilized illegally to run an XMR (Monero) miner and that's after they have succeeded in draining the wallet of those people.

[cryptoaddictchie]

Its a famous game and has good quality. Probably some crypto users were fond of it. Hopefully some users here are aware and already seen the potential risk of the game. Thanks OP for sharing, this might be helpful. Does anyone already been victimized already of the said malicious file? Like someone has post about crypto being stolen?

[lovesmayfamilis]

This Mario toy never gets old; I remember it from my early childhood. Now my children play it with pleasure on consoles. I'm not surprised why hackers choose popular games to infect because they are relevant for all ages. But sewing in a miner and other nonsense is really a trend in cryptocurrencies. I don't think there are fools who play games and combine their finances in one place.
Talking about using Linux systems will sound like a broken record. But if you would like to know in advance what you are downloading for Windows, at least check these files. A couple of services that can help you even if you have an antivirus are:

https://analyze.intezer.com/
https://www.virustotal.com/gui/home/upload

[mk4]

You should note that the articles were referring to an altered version of the Super Mario 3 game. This is no different than those cracked Windows 10 torrents with malware and rootkits embedded into the software.

[Hyphen(-)]

Scammers will always go out of their way to think of something that would benefit them and bring them money, which is why they are now installing malware on popular websites, programs, and games.

Thank you for the information, OP, because Super Mario was my favorite game when I was a kid, and I still have it on my desktop, though I haven't tried installing the current version because I wasn't interested in playing games anymore.

Talking about using Linux systems will sound like a broken record. But if you would like to know in advance what you are downloading for Windows, at least check these files. A couple of services that can help you even if you have an antivirus are:

https://analyze.intezer.com/
https://www.virustotal.com/gui/home/upload

I always find it difficult to trust my computer anymore because of malware.

I don't know if all these basic antivirus programs are actually working because I have Smadav antivirus on my system, and it was still affected by malware months ago. I have formatted and installed another window on my PC.I thought of Linux, but I am used to Windows and thought Linux would be something new, even though it was recommended to me.

Thank you, @lovesmayfamilis, for these links; at least it will be helpful to make sure all I am downloading is secure.

[lovesmayfamilis]

I thought of Linux, but I am used to Windows and thought Linux would be something new, even though it was recommended to me.

I can offer you several Linux distributions that have a very similar interface to Windows.
You can try to work with them by installing them on a virtual machine, for example, VirtualBox. It is not necessary to learn all the commands at once; a graphical interface is enough to work. Just a few versions for reference:

https://www.virtualbox.org

https://zorin.com/
https://linuxmint.com/
https://ubuntu.com/
https://getsol.us/
https://kubuntu.org/
https://www.linuxliteos.com/

[Hyphen(-)]

I thought of Linux, but I am used to Windows and thought Linux would be something new, even though it was recommended to me.

I can offer you several Linux distributions that have a very similar interface to Windows.
You can try to work with them by installing them on a virtual machine, for example, VirtualBox. It is not necessary to learn all the commands at once; a graphical interface is enough to work. Just a few versions for reference:

https://www.virtualbox.org

https://zorin.com/
https://linuxmint.com/
https://ubuntu.com/
https://getsol.us/
https://kubuntu.org/
https://www.linuxliteos.com/

Thank you, I really appreciate.

I will go through them, and if possible learn all the command.

[CryptSafe]

Thanks for your research findings and updating the platform with it mate. I have a friend who loves this mario game and plays it at leisure. I think this information would be helpful to him because he also uses that same system for Crypto activities too. He has his wallet installed on the that same system which if we are to go by this update here, it would be very risky to have that software still in the system with his other personal and wallet details.
I will call his attention to this immediately to further do the needful.
Thanks for this update mate as I can not see him go through any of such pains as a result of this when I have such information at my disposal to feed him with.

[Dunamisx]

Scammers and hackers were always on the run to pursue after their prey by bringing up daily new means to physh and attack the people through their various malicious attempts using different approaches and dimensions, they have always wanted to attack the people ceaselessly because they have nothing tangible to work for than seeking after opportunities on other people's weakness to attack them and steal their digital assets from them, we need to always be on an alert by avoiding anything looking suspicious enough to believe.

[Queentoshi]

According to decrypt.co they already have nearly 17 million downloads.
Just imagine 17 million laptops or desktops being utilized illegally to run an XMR (Monero) miner and that's after they have succeeded in draining the wallet of those people.

There will be many victims for sure, it is too late to avoid that. Scammers were smart to target a popular game that most of us have always known from our childhood days. My big concern and what I cannot stop thinking about is what if this is not the only game that scammers gave been able to embed a Trojan. There are many childhood popular games played by people and they can be infected too. Best thing I think is that we should avoid keeping our crypto in the same device where we download things and use for other activities.

[Taskford]

The trojanized game is likely promoted on gaming forums, social media groups, or pushed to users via malvertizing, Black SEO, etc.

So the main problem is obtaining the game from unofficial source, which is common way to get your device compromised if you don't know which unofficial source doesn't share malware. Although for this case, i tried search "Super Mario 3: Mario Forever" but couldn't any link/website which seems to be official.

There are few people seeking for crack version of those games to avoid maybe the fees. But they didn't consider the risk like this that's why other realize late on what action they have done. This is constant reminder that we should download the legitimate games or other apps to legitimate source so that our computers will not compromise by any harmful malwares that can affect us or steal our crypto stored on our computers.

[Faisal2202]

Thanks for the heads up, as I am a bit involved in gaming too, and love to play games but mostly on the smartphone. And, who still plays Super Mario, (no offense) but I think they must be millennials and the adoption rate among millennials is less than the Gen-Z generation, So I can say, many would still be saved from this Umbral Stealer. I read so many news like these in the past, like the following ones:

• [Warning]: New Mystic Stealer targets 40 web browsers and crypto wallets
• Pirated Windows builds with crypto stealer

I can say, these types of attacks are increasing, and the number of victims too, because many new people are adopting crypto in there lives and appreciating this technology because this has escaped them from the matrix. And attackers are taking benefit of the newbies coming into the crypto sphere. Well, all we can do is to spread awareness among them by sharing these types of news. Last time, I shared the above news with my friends too who are involved or not involved in crypto. Because those who are not involved in crypto they will someday get into it and then they might prevent from making the same mistake that other newbies made.

[_act_]

People that download Super Mario from the original site will not fall into this malware hack, only those that use any site they see online to download and install the game will be the one to be affected by this malware. The malware is not on the official game downloads from the original site but from fake sites.

It has always be a lesson to use the original URL and also to use the original apps, not fake ones.

[Coin_trader]

I’m confused about this because how come a Nintendo game will contain a virus while its being audit before it release to the public until I found out that this version is not the official and just the modified version uploaded on random download site to get profit from adsense. OP maybe add a note that this games is not from official distributor and just from the modified version available on free market which is very common on other games.

Some games includes adware, trojan and other shit virus when installed in the laptop. This kind of garbage destroyed my old computer and I never download crack version of any software on random site after that.

I was scared reading the title but I guess this is just a false alarm, OP should really put a note that this is not from the official website or nintendo shop.

[Aikidoka]

Thanks for the warning but I wonder if there are still people in the forum who play Super Mario 3 which is a really old and classic game, It's just very OG. Despite its age it remains incredibly popular and enjoyable for many people around the world. I'm sure there are still a ton of players who continue to download it from the internet time to times but I personally wouldn't do so unless I'm certain about the source's authenticity.

So if you want to play the real game make sure to download it from the real source because It's possible to find versions of the game online that have been edited by hackers who then reupload them to the internet. These modified versions can be used to exploit people's PCs for activities like crypto mining or data theft.

So getting the game from a reliable source is what you need to do to avoid any trojans or malware. If you have already downloaded the game from a sus website/forum, you better try to use an antivirus scan to clean your PC as well as it's important to change your important passwords and take necessary precautions to protect your personal information before it's too late.

[sokani]

are few people seeking for crack version of those games to avoid maybe the fees. But they didn't consider the risk like this that's why other realize late on what action they have done. This is constant reminder that we should download the legitimate games or other apps to legitimate source so that our computers will not compromise by any harmful malwares that can affect us or steal our crypto stored on our computers.

This one hit me hard because I used to download cracked version of games in the past. I've this question that I've been wanting to ask for a while and I feel there's no better time than now to ask. if one uses a hardware wallet to access crypto funds from a malware infected desktop or laptop, is the person's crypto wallet at the risk of being compromised? Though, I don't do that anymore and my system is in good state but I wish to know for learning purpose.

[libert19]

are few people seeking for crack version of those games to avoid maybe the fees. But they didn't consider the risk like this that's why other realize late on what action they have done. This is constant reminder that we should download the legitimate games or other apps to legitimate source so that our computers will not compromise by any harmful malwares that can affect us or steal our crypto stored on our computers.

This one hit me hard because I used to download cracked version of games in the past. I've this question that I've been wanting to ask for a while and I feel there's no better time than now to ask. if one uses a hardware wallet to access crypto funds from a malware infected desktop or laptop, is the person's crypto wallet at the risk of being compromised? Though, I don't do that anymore and my system is in good state but I wish to know for learning purpose.

From my knowledge, hardware wallets are comparatively more secure than hot wallets on an infected pc, your hot wallet would get drained in an instant. With HW, malwares can at most change destination address you are transferring to hence getting funds into their wallets rather than where you intended to.

[Marykeller]

When you believe you have gained insight into scammers' methods, they change their tactics to scam you in ways you wouldn't expect.

I don't think that the internet is now safe from the games and applications we download because scammers may easily manipulate it by installing malware that can give them access to our stored passwords and crypto accounts.

Since we are unaware of how scammers are now altering versions of the Super Mario 3 game, I wouldn't be shocked if many people have already fallen victim to it or will do so soon.

This is why incidents like these should be publicized to game fans to be informed and careful about the types of games they download nowadays because scanners can alter well-known games and applications in ways that users are unaware of.

Who knows what other games scammers have altered apart from Super Mario? I know that Super Mario will not be the only game, they have succeeded altered.