Threat Intelligence Report

11 Malicious NuGet Tools Pose as Game Cheats to Drop a Windows Host-Surveillance Payload

📅 July 15, 2026 📰 socket.dev 🔍 0 CVE(s) referenced

A campaign of 11 malicious NuGet packages disguised as game cheats deploys a Windows surveillance payload that exfiltrates host telemetry to Google Sheets, enables remote screenshot control via Telegram, and enforces hardware-based bans, posing a serious supply chain threat to developers and gamers.

vendor

🔐 Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

📊 Visual Mindmap

🎯 IOC Extraction

⚔️ MITRE ATT&CK TTPs

📦 STIX 2.1 Bundle