Police warn of malicious 'Cheat Lab' program targeting gamers
Police in Kingston, Ont. have issued a warning to residents regarding a malware attack that is targeting video gamers.
Fraudsters are posting links in comment sections of video game websites and forums, offering a program called "Cheat Lab" that claims to offer ways to help players cheat at various games. The program, however, allows cybercriminals to access your computer and your personal data.
- Sign up now for daily CTV News Ottawa newsletters
- The information you need to know, sent directly to you: Download the CTV News App
"At first glance, Cheat Lab appears to be a legitimate program and even has an activation code. If you install it, there is a message with an offer to receive a free version of the software if you send it to your friends. However, the program is actually malware," Kingston police said in a news release.
According to the New Jersey Cybersecurity and Communications Integration Cell (NJCCIC), Cheat Lab appears to be a variant of a different Trojan Horse-style malware called Redline.
"Redline is an information-stealing malware capable of acting as a backdoor, carrying out tasks from the command-and-control (C2) server, and exfiltrating data," the government agency said.
Kingston police are advising gamers to be skeptical of offers and deals.
"If you find a link for a free product that seems too good to be true, it probably is," police said.
"When downloading software, be mindful of the source. Legitimate companies do not distribute their software by posting links in comments. You should only download software from a trusted company or source."
The NJCCIC, however, notes that the Cheat Lab malware was found on Microsoft's GitHub, which is widely used for legitimate purposes by millions of people daily.
"The file was not part of the repository itself but was uploaded as a comment on an issue of the project. Threat actors exploited a flaw in which GitHub automatically uploads files attached to comments to GitHub’s content delivery network (CDN). The URLs generated for these files include the repository’s name, which gives the appearance of being associated with the project," the NJCCIC said.
It also recommends exercising caution with links found in comments, even if they may appear to originate from legitimate sources.
While this particular scam targets gamers, police warn that similar tactics could be used against anyone.
"Always stop and think before clicking on a link."
CTVNews.ca Top Stories
Woman with liver failure rejected for a transplant after medical review highlights alcohol use
For nearly three months, Amanda Huska has been in an Ontario hospital, part of it on life support, because of severe liver failure. Her history of alcohol use is getting in the way of her only potential treatment: a liver transplant.
B.C. man 'attacked suddenly' by adult grizzly near Alberta boundary: RCMP
A B.C. man is recovering from multiple injuries after he was "attacked suddenly" by an adult grizzly bear near Elkford Thursday afternoon.
His SUV was stolen on Montreal's South Shore. Then he got a $156 parking ticket
A couple is frustrated after their SUV was stolen from Montreal's South Shore in March and they received a parking ticket for the same vehicle last week.
Box tree moths have infested Ontario and experts say more are coming. Here's what to do to protect your garden
An invasive moth species is on the rise in Canada and, if you've planted a certain shrub, it could stand to ruin your garden.
Banking mogul suing government after intelligence leaks leave him shut out of Canadian economy
Chinese Canadian banking mogul Shenglin Xian has launched a $300 million lawsuit against the federal government. It’s a means to find the source of intelligence leaks which Xian says has cost him his livelihood.
Impaired driver sentenced to 7 years after double-fatal Cambridge crash
A man who killed two people in a drunk driving crash was sentenced Friday to seven years behind bars.
Online obituary business from Quebec City catching flak for posting unauthorized death notices
Some within the funeral home and mortuary services industries in Quebec say they are frustrated with an online obituary site that publishes death notices from public information posted on the internet. They claim the site is doing so without consent from the families.
Serial sexual offender linked to unsolved 1970s homicides of four Calgary girls, women
An investigation into unsolved historical homicides from the 1970s has linked the deaths of two girls and two young women in and around Calgary to a now-deceased serial offender.
The latest advice for expecting parents? Sign up for child care as soon as you're pregnant
Canada's new $10-a-day child care program is expanding, but there's growing evidence that demand for the program is rising even faster, leaving many parents on the outside looking in.