Hacker infects 18,000 "script kiddies" with fake malware builder

January 25, 2025 · Bill Toulas

URL: https://www.bleepingcomputer.com/news/security/hacker-infects-18-000-script-kiddies-with-fake-malware-builder/

“A trojanized version of the XWorm RAT builder has been weaponized and propagated,” reads the CloudSEK report.

Someone trojaned a free XWorm builder and infected 18,459 aspiring malware authors. The backdoor stole passwords and keystrokes over a Telegram bot. CloudSEK used the built-in kill switch, and some machines stay infected. Nobody feels sorry for them.