Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
2 IOCs

11 Malicious NuGet Packages Pose as Game Cheats to Deploy Windows Surveillance Malware

Cyber Press
Cyber Press
Published July 15, 2026Original Report

Excerpt

Socket’s Threat Research Team has uncovered 11 malicious NuGet packages masquerading as game cheats, bots, and “panels” that deliver a Windows surveillance-capable payload named pepesoft.exe. The packages were uploaded as .NET command-line tools, also known as DotnetTool packages. They target players of games including Albion Online, GTA5RP, GrandRP, Majestic RP, Lineage 2, Throne and Liberty, Russian Fishing 4, and others. Researchers reported the packages to NuGet and…

Read the original report →

Indicators of Compromise

Open the mindmap →

2 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA163e1e25e666fa2e5fe34219ab735cd0cf0b3a3a6MediumScore 53/100First seen
SHA118887f9158bc827b1867286a5edcd25bb0eabafeMediumScore 53/100First seen

IOC Relationship Graph

Building graph…