Malicious Blender Model Files Deliver StealC Info-Theft Malware

• Russian hackers exploit Blender’s autorun feature to deliver stolen StealC information via .blend files
• Malware deployed via CGTrader assets, extracting payloads from Cloudflare Workers domains
• StealC Variant Targets Browsers, Crypto Wallets, Chat Apps, and VPN Clients Without Being Detected

Blender has a convenient but risky feature that experts say is being exploited by Russian hackers to distribute information-stealing malware.

Cybersecurity researchers Morphisec observed the attacks in the wild and urged designers and other professionals to be vigilant.