zEus Stealer Distributed via Crafted Minecraft Source Pack
07-May-24
The variant is also distributed via a Minecraft source pack, but it’s embedded in a WinRAR self-extract file. The self-extract file mimics a Windows screensaver file. It runs the stealer and opens the image used as a file icon. It’s an image from the Internet with the string “zEus” added. This name is also found in a profile of the Discord webhook receiving stolen data.
