[Stanley]

Trojanized Gaming Tools Spread Java-Based RAT via Browser and Chat Platforms

Threat actors are luring unsuspecting users into running trojanized gaming utilities that are distributed via browsers and chat platforms to distribute a remote access trojan (RAT).
"A malicious downloader staged a portable Java runtime and executed a malicious Java archive (JAR) file named jd-gui.jar," the Microsoft Threat Intelligence team said in a post on X. "This downloader used PowerShell

https://thehackernews.com/2026/02/trojan...-java.html

[W1NK1LL3RX]

Fake gaming tools are being used to install malware. People download them from browsers or chat apps thinking they are safe. The malware gives attackers remote access to the computer.

Best rule: do not download game tools from random sources.

[MadScientist]

Fake gaming tools are being used to install malware. People download them from browsers or chat apps thinking they are safe. The malware gives attackers remote access to the computer.

Best rule: do not download game tools from random sources.

Right that's like a prime way to get zombies with good comp specs >.< I just assume any game hack/mod is backdoored by default lol. Havent used one since Diablo 2 as a teen (and it was backdoored lol)

[W1NK1LL3RX]

Right that's like a prime way to get zombies with good comp specs >.< I just assume any game hack/mod is backdoored by default lol. Havent used one since Diablo 2 as a teen (and it was backdoored lol)

Don't worry, I was backdoored back in the day when using a “Diablo 2 Dupe Hack” lol.

[DramaKing]

Can't agree more with this. Prime way to get victims to run sketchy, unsigned binaries.

[MadScientist]

Don't worry, I was backdoored back in the day when using a “Diablo 2 Dupe Hack” lol.

Not far off from me, was a bot to do baal runs / countress runs xD All it did was pop a fake error and backdoor me QQ

Funny memory as I just started playing Diablo 2 again since they released a new expansion pack / class and QOL updates. Had to go down memory lane with the new Warlock class lol

[shakur123]

Not surprising. Gaming tools and mods have always been an easy social-engineering vector—people download them quickly and skip security checks.

The interesting part is using portable Java + PowerShell to stage the RAT, which makes the malware more portable and harder to flag with simple signatures.