League of Legends fans around the world are being targeted by a new malware campaign that is spreading rapidly, posing a threat to the safety and security of their gaming experiences. With the ongoing League of Legends World Championship captivating audiences from Sept 23 to Nov 2, 2024, cybercriminals are taking advantage of the excitement to launch malicious attacks.
According to a recent report from Bitdefender Labs, the Lumma Stealer virus is at the center of this dangerous campaign, which has already affected approximately 4,000 victims, primarily male adults across Europe. The malware is being spread through deceptive social media advertisements that promise a free download of League of Legends, exploiting the popularity of the esports event.
The scam begins with enticing ads on social media platforms that lead users to a fake download page designed to mimic the official League of Legends website. Unsuspecting fans who click on the download link are directed to a Bitbucket repository containing a malicious archive. This archive includes an executable file alongside a legitimate Windows file, user32.dll, that serves as a dropper for the Lumma Stealer malware.
Once installed on a victim’s device, Lumma Stealer is capable of extracting sensitive information such as credit card details, passwords, crypto wallets, and browser cookies. This stolen data can then be sold on underground markets, making victims vulnerable to identity theft and phishing attacks. To make matters worse, Lumma Stealer is designed to evade detection by antivirus software by injecting itself into a legitimate Windows process.
In light of this threat, gamers are urged to exercise caution and take steps to protect themselves during the League of Legends World Championship. It is essential to double-check website URLs, download games only from official sources like the official website or platforms such as Steam, and be wary of online ads that appear too good to be true. Additionally, using a strong security solution such as a reputable antivirus and security suite can help safeguard against cyber threats and ensure a safe gaming experience.
As cybercriminals continue to target unsuspecting fans, staying informed and vigilant is crucial to prevent falling victim to malware attacks. By following these precautions and remaining alert to cybersecurity risks, players can enjoy the League of Legends World Championship without compromising their online safety and security.