Malicious Blender model files deliver the StealC infostealing malware

• Russian hackers exploit Blender’s Auto Run feature to deliver StealC infostealer via .blend files
• Malware deployed through CGTrader assets and pulls payloads from Cloudflare Workers domains
• StealC Variant Targets Browsers, Crypto Wallets, Chat Apps and VPN Clients Undetected

Blender has a handy but risky feature that experts have found is being exploited by Russian hackers to deliver infostealer malware.

Cyber ​​security researchers Morphisec observed the attacks in the wild and urged designers and other professionals to be vigilant.