Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Vidar Stealer 2.0 Spreads Through Fake Game Cheats Promoted on GitHub and Reddit

## Vidar 2.0 Malware Distribution through Game Cheat Repositories

JBy Joseph CainMar 18, 20262 min read

Vidar 2.0 Malware Distribution through Game Cheat Repositories

The Vidar infostealer, updated as Vidar 2.0, is currently being disseminated through numerous fake game cheat repositories on GitHub and Reddit. This malware masquerades as free cheating software for popular online games, deceiving users into downloading a credential-stealing tool.

Targeted Games and User Vulnerabilities

Cybercriminals are systematically focusing on major online games such as Counter-Strike 2, Fortnite, Valorant, and Call of Duty. Gamers seeking free cheat tools are particularly vulnerable targets due to their expectations of security warnings and their valuable digital assets.

Vidar 2.0 is capable of stealing browser credentials, cookies, autofill data, Azure tokens, cryptocurrency wallets, FTP and SSH credentials, as well as Discord and Telegram session data. Its rapid operation allows data to be compromised before detection. Compromised gaming accounts are especially valuable due to the potential resale of in-game items and currency.

Threat actors are utilizing trusted platforms, hosting landing pages on GitHub to lend credibility to their operations. Reddit posts in gaming communities further direct users to these fake repositories. This strategic use of well-known platforms and social engineering creates a deceptive infection pipeline.

The Vidar infostealer, updated as Vidar 2.0, is currently being disseminated through numerous fake game cheat repositories on GitHub and Reddit.
Joseph Cain · Thehackingpost

Users who click on links in Reddit posts or visit fake GitHub pages are directed to sites with installation instructions. The setup mimics legitimate software installations, advising users to disable antivirus, extract password-protected archives, and execute files with administrator rights. These actions are often perceived as normal by those seeking cheat software.

The malicious file is a PowerShell script compiled into a .NET binary. Once activated, it adds a Windows Defender exclusion, retrieves payloads from GitHub, and establishes persistence through scheduled tasks with elevated privileges. The final payload connects to Telegram bots and Steam profiles to conceal its command-and-control infrastructure.

Advertisement

Organizations should implement endpoint protection or EDR tools to detect unusual process chains and data exfiltration. Keeping systems updated and restricting software execution to standard paths are essential measures. Users should download software exclusively from official vendor websites or verified repositories.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026