Police warn of malicious 'Cheat Lab' program targeting gamers
Police in Kingston, Ont. have issued a warning to residents regarding a malware attack that is targeting video gamers.
Fraudsters are posting links in comment sections of video game websites and forums, offering a program called "Cheat Lab" that claims to offer ways to help players cheat at various games. The program, however, allows cybercriminals to access your computer and your personal data.
- Sign up now for daily CTV News Ottawa newsletters
- The information you need to know, sent directly to you: Download the CTV News App
"At first glance, Cheat Lab appears to be a legitimate program and even has an activation code. If you install it, there is a message with an offer to receive a free version of the software if you send it to your friends. However, the program is actually malware," Kingston police said in a news release.
According to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC), Cheat Lab appears to be a variant of a different Trojan Horse-style malware called Redline.
"Redline is an information-stealing malware capable of acting as a backdoor, carrying out tasks from the command-and-control (C2) server, and exfiltrating data," the government agency said.
Kingston police are advising gamers to be skeptical of offers and deals.
"If you find a link for a free product that seems too good to be true, it probably is," police said.
"When downloading software, be mindful of the source. Legitimate companies do not distribute their software by posting links in comments. You should only download software from a trusted company or source."
The NJCCIC, however, notes that the Cheat Lab malware was found on Microsoft's GitHub, which is widely used for legitimate purposes by millions of people daily.
"The file was not part of the repository itself but was uploaded as a comment on an issue of the project. Threat actors exploited a flaw in which GitHub automatically uploads files attached to comments to GitHub’s content delivery network (CDN). The URLs generated for these files include the repository’s name, which gives the appearance of being associated with the project," the NJCCIC said.
It also recommends exercising caution with links found in comments, even if they may appear to originate from legitimate sources.
While this particular scam targets gamers, police warn that similar tactics could be used against anyone.
"Always stop and think before clicking on a link."
CTVNews.ca Top Stories
BREAKING Serial sexual offender linked to unsolved 1970s homicides of four Calgary girls, women
An investigation into unsolved historical homicides from the 1970s linked the deaths of two girls and two young women in and around Calgary to a now-deceased serial offender.
Scottie Scheffler isn't the first pro golfer to be arrested during a tournament
Scottie Scheffler's arrest hours before his second-round tee time at the PGA Championship in Louisville, Kentucky, will go down as one of the most shocking in professional golf history. It certainly wasn't the first, though.
NEW What a wildfire survivor says she regrets not grabbing before leaving home
Carol Christian had 15 minutes to evacuate her home during the Fort McMurray wildfires in 2016. She ended up losing the house and everything inside. Now, she wants to share the lessons she learned.
Woman with liver failure rejected for a transplant after medical review highlights alcohol use
For nearly three months, Amanda Huska has been in an Ontario hospital, part of it on life support, because of severe liver failure. Her history of alcohol use is getting in the way of her only potential treatment: a liver transplant.
Canadian convicted of attacking Nancy Pelosi's husband with a hammer sentenced to 30 years
The man convicted of attempting to kidnap then-U.S. House Speaker Nancy Pelosi and attacking her husband with a hammer was sentenced Friday to 30 years in prison.
World No. 1 golfer charged with police officer assault before PGA Championship second round
World number one golfer Scottie Scheffler was arrested and charged with the assault of a police officer in what he called a 'chaotic situation' before being released in time to start his second round at the PGA Championship on Friday.
Australia's richest woman seeks removal of her portrait from exhibition
Art is subjective. And while many artists long to share their work with the world, there's no guarantee that the audience will understand it, or even like it.
B.C. optometrist warns against trending eye colour change procedure
A medical procedure that can permanently change a person's eye colour may be trending on social media, but a B.C. optometrist is warning about the significant risks associated.
An airplane passenger was spotted in an overhead bin. This was the reaction
Airplane overhead compartments. Home to luggage of all shapes and sizes, the odd coat or two, several duty-free bags, a fair bit of dust and… passengers?