Technique

Poisoned Software

Also known as: Pirated Software Infection, Cracked Software Malware, Trojanized Downloads, Infected Game Mods, Malware-Bundled Software, Warez Malware

DELIVERY

Malware bundled with pirated software, game mods, cheats, cracks, or keygens distributed through unofficial channels like torrent sites, warez forums, or YouTube tutorial links.

Common attack flows

How it fits in a scam

This technique shows up duringDELIVERY

Before

This is often where the scam begins.

After

Defense

How to defend against this

How to spot it

  • Antivirus or Windows Defender flags the download
  • Software requires disabling security software to install
  • Unexpected system slowdown after installation
  • New background processes or startup items appear
  • High CPU/GPU usage indicating crypto mining
  • Browser hijacking or new toolbars appear
  • Credentials stolen shortly after installation
  • Unexpected network activity from unknown processes

Tools you can use

Steps you can take

Seen in the wild

Where we’ve seen it

Commonly targets

Further reading