{"id":3214,"date":"2025-05-26T03:31:57","date_gmt":"2025-05-26T10:31:57","guid":{"rendered":"https:\/\/www.ssls.com\/blog\/?p=3214"},"modified":"2025-05-26T03:31:58","modified_gmt":"2025-05-26T10:31:58","slug":"ageostealer-infostealer-malware-is-targeting-gamers","status":"publish","type":"post","link":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/","title":{"rendered":"AgeoStealer infostealer malware is targeting&nbsp;gamers"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png\" alt=\"\" class=\"wp-image-3143\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Gamers are the latest infostealer targets. <a href=\"https:\/\/flashpoint.io\/blog\/ageostealer-how-social-engineering-targets-gamers\/\">According to Flashpoint<\/a>, a strain known as AgeoStealer has recently appeared, standing out due to its unique delivery method. To learn why it\u2019s particularly unique, let\u2019s first take a quick look at how infostealers typically work.&nbsp;<\/p>\n\n\n\n<!--more-->\n\n\n\n<h2 class=\"wp-block-heading\">What is an infostealer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Infostealers, as you might have guessed by the name, are a type of malware that compromises a system to steal information. They usually target sensitive, valuable data, such as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Personal data<\/li>\n\n\n\n<li>Browser data<\/li>\n\n\n\n<li>Login credentials<\/li>\n\n\n\n<li>Financial information&nbsp;<\/li>\n\n\n\n<li>Crypto wallets<\/li>\n\n\n\n<li>Emails and chat logs<\/li>\n\n\n\n<li>Images and documents<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Infostealers can be delivered to the target system in various ways, from phishing email attachments and links to infected software to malicious websites that exploit browser vulnerabilities.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Stealers have been around for nearly two decades, the first appearing in 2006. They have remained popular among threat actors because they\u2019re generally easy to use, readily available, cheap, and give access to valuable data.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Posing as developers to exploit gamers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">AgeoStealer delivery has more of a social engineering element than is usual for infostealers. Threat actors impersonate developers seeking beta testers for their fake video game, making contact on a BlogSpot site, as well as gaming communications platforms. They take advantage of the fact that people are often less vigilant during leisure time and the element of trust game testing communities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Victims download the game file which is in fact the infostealer malware, a compressed archive (RAR, ZIP, or 7Z) protected by two passwords. This helps it bypass signature-based antivirus detection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The file opens an NSIS installer disguised as a legitimate Unity software package. This installer then launches an Electron application running concealed JavaScript payloads, which security tools can misinterpret.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">After that, the malware gets to work, targeting where the most valuable data resides. This is mainly browser data, as well as computer data. For browsers, it focuses on Chrome, Firefox, Microsoft Edge, and Opera, stealing information like saved credentials, session tokens, and browsing history, to potentially access the victim\u2019s resources and hijack accounts. Beyond the browser, it will search common directories for valuable files.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It exfiltrates the data by uploading the files to a file-sharing service, compressing files and sending them via a HTTP POST request. It then sends the stolen data\u2019s download URL to a remote server where the threat actor can access it. The attacker never interacts with the stolen data directly during the process, which helps keep them safe from being caught.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique delivery method. To learn why it\u2019s particularly unique, let\u2019s first take a quick look at how infostealers typically work.&nbsp;<\/p>\n","protected":false},"author":9,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3214","post","type-post","status-publish","format-standard","hentry","category-news"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog<\/title>\n<meta name=\"description\" content=\"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog\" \/>\n<meta property=\"og:description\" content=\"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/\" \/>\n<meta property=\"og:site_name\" content=\"SSLs.com Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-26T10:31:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-26T10:31:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png\" \/>\n<meta name=\"author\" content=\"Cora Quigley\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cora Quigley\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/\"},\"author\":{\"name\":\"Cora Quigley\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"headline\":\"AgeoStealer infostealer malware is targeting&nbsp;gamers\",\"datePublished\":\"2025-05-26T10:31:57+00:00\",\"dateModified\":\"2025-05-26T10:31:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/\"},\"wordCount\":421,\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_AgeoStealer.png\",\"articleSection\":[\"news\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/\",\"name\":\"AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_AgeoStealer.png\",\"datePublished\":\"2025-05-26T10:31:57+00:00\",\"dateModified\":\"2025-05-26T10:31:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\"},\"description\":\"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_AgeoStealer.png\",\"contentUrl\":\"https:\\\/\\\/ssls-blog.production.cloudplatform.tech\\\/wp-content\\\/uploads\\\/SSL_Blog_AgeoStealer.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/ageostealer-infostealer-malware-is-targeting-gamers\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AgeoStealer infostealer malware is targeting&nbsp;gamers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/\",\"name\":\"SSLs.com Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/#\\\/schema\\\/person\\\/ae7158292578f80604c428cc5bbe68c0\",\"name\":\"Cora Quigley\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g\",\"caption\":\"Cora Quigley\"},\"description\":\"Cora is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.\",\"sameAs\":[\"https:\\\/\\\/www.ssls.com\\\/\"],\"url\":\"https:\\\/\\\/www.ssls.com\\\/blog\\\/author\\\/cora-quigley\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog","description":"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/","og_locale":"en_US","og_type":"article","og_title":"AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog","og_description":"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique","og_url":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/","og_site_name":"SSLs.com Blog","article_published_time":"2025-05-26T10:31:57+00:00","article_modified_time":"2025-05-26T10:31:58+00:00","og_image":[{"url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png","type":"","width":"","height":""}],"author":"Cora Quigley","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cora Quigley","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#article","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/"},"author":{"name":"Cora Quigley","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"headline":"AgeoStealer infostealer malware is targeting&nbsp;gamers","datePublished":"2025-05-26T10:31:57+00:00","dateModified":"2025-05-26T10:31:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/"},"wordCount":421,"image":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png","articleSection":["news"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/","url":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/","name":"AgeoStealer infostealer malware is targeting gamers | SSLs.com Blog","isPartOf":{"@id":"https:\/\/www.ssls.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#primaryimage"},"image":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png","datePublished":"2025-05-26T10:31:57+00:00","dateModified":"2025-05-26T10:31:58+00:00","author":{"@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0"},"description":"Gamers are the latest infostealer targets. According to Flashpoint, a strain known as AgeoStealer has recently appeared, standing out due to its unique","breadcrumb":{"@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#primaryimage","url":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png","contentUrl":"https:\/\/www.ssls.com\/blog\/wp-content\/uploads\/SSL_Blog_AgeoStealer.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.ssls.com\/blog\/ageostealer-infostealer-malware-is-targeting-gamers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ssls.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AgeoStealer infostealer malware is targeting&nbsp;gamers"}]},{"@type":"WebSite","@id":"https:\/\/www.ssls.com\/blog\/#website","url":"https:\/\/www.ssls.com\/blog\/","name":"SSLs.com Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ssls.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.ssls.com\/blog\/#\/schema\/person\/ae7158292578f80604c428cc5bbe68c0","name":"Cora Quigley","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/69e16d19dbb7f01ea23d6b22b14f31a0f057e7f7e1807cf9ff4a550eb5a2f90d?s=96&d=blank&r=g","caption":"Cora Quigley"},"description":"Cora is a digital copywriter for SSLs.com. Having eight years of experience in online content creation, she is a versatile writer with an interest in a wide variety of topics, ranging from technology to marketing.","sameAs":["https:\/\/www.ssls.com\/"],"url":"https:\/\/www.ssls.com\/blog\/author\/cora-quigley\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/comments?post=3214"}],"version-history":[{"count":1,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3214\/revisions"}],"predecessor-version":[{"id":3215,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/posts\/3214\/revisions\/3215"}],"wp:attachment":[{"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/media?parent=3214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/categories?post=3214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ssls.com\/blog\/wp-json\/wp\/v2\/tags?post=3214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}