ISLAMABAD: A leading cybersecurity company Friday warned Pakistanis about a new cyber threat involving attackers using multiple website distributing pirated software, including graphics editors and games. According to a report issued on Friday, Kaspersky Threat Research has revealed its analysis of RenEngine, a malware loader that has recently gained public attention. Beyond the cracked games highlighted in recent reports, Kaspersky researchers discovered that attackers created dozens of websites distributing RenEngine through pirated software, including graphics editors like CorelDRAW. This expands the known attack surface beyond the gaming community to anyone seeking unlicensed software. Kaspersky has recorded incidents in many countries across different regions. The distribution pattern indicates opportunistic attacks rather than targeted operations. When Kaspersky first identified RenEngine, the loader was delivering the Lumma stealer. Current attacks distribute ACR Stealer as the final payload, and Vidar stealer has also been observed in some infection chains. Infostealers, or stealers for short, are malware that collect data from a user’s device and send it to attackers who then use the gathered information, such as passwords, credit card numbers, cryptocurrency wallet keys, email credentials, and system information, for identity theft, account takeover, financial fraud, or resale on underground marketplaces. To stay protected, Kaspersky recommends downloading games and software only from official sources. Copyright Business Recorder, 2026