ESET researchers have discovered a new threat named joao targeting gamers with backdoor spying, and DDoS capabilities.Spread via Aeria games published on unofficial websites the sneaky malware named Joao, is modular malware capable of downloading and running other malicious codes on the victim’s computer.
To spread their malware the attackers behind Joao have massively misused -multiplayer online role-playing games (MMORPGs) originally published by Aeria Games.
Research by ESET has shown that several other Aeria games have been misused in the same way in the past, however, their corresponding unofficial websites have either gone inactive or had the malicious downloads removed in the meantime.
The affected games have been modified to run Joao’s main component,a malicious library with downloading capabilities detected by ESET’s systems as Win32/Joao.A. When users run the game launcher, Joao is launched along with it without the knowledge or approval by the user.
Upon launching, the Joao downloader first sends basic information about the infected computer device name, OS version and information on user privileges to the attacker’s server.
Because the malware keeps its operations “silent” and the game works as expected, there’s nothing suspicious about the whole infection process from the user’s point of view. Compared to downloading and launching a legitimate Aeria game, the only visible difference is an extra .dll file in the game’s installation folder.
After the communication with the server has been established, server-side logic decides whether and which components will be sent to the victim’s computer.The components discovered by eset showed backdoor, spying, and DDoS capabilities.
To clean the malware, one can use a reliable security solution to detect and remove the threat. You can also use ESET’s Free Online Scanner.
To avoid infections gamers are advised to Favor official sources whenever possible and to keep all games updated to avoid vulnerabilities that can be exploited by malicious actors.
In addition they should also use a reliable security solution while playing since many security solutions today have a gamer mode option that lets you enjoy your games without interruptions while also keeping your computer protected.
For 30 years, ESET has been developing IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint and mobile security, to encryption and two-factor authentication .
ESET unobtrusively protects and monitors 24/7, updating defenses in real-time to keep users safe and businesses running without interruption.
Backed by R&D centers worldwide, ESET becomes the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003 and protecting gamers from viruses and malware..