It's a me, crypto malware! Mario game infects computers with mining software

Cyble Research & Intelligence Labs reports that the legitimate installer for the PC fan game Super Mario 3: Mario Forever carries a malicious payload that can steal data and secretly run crypto mining software. The installer also installs XMR Miner, which runs a Monero cryptocurrency miner in the background, using the user's computing resources for a malicious actor's benefit. The game also drops a file that leads to Umbral Stealer, which Cyble describes as a "lightweight and efficient information stealer" that can take passwords, webcam images, and crypto wallet information, including Atomic Wallet data. A CNET Downloads listing shows nearly 17 million downloads of the game through its Softendo website, and a Protos report cites earlier malware cases involving the same installer.