Cybercriminals are using the Godot Engine to spread malware undetected by most antivirus solutions, according to Check Point Research. The malware, dubbed “GodLoader,” uses Godot’s scripting language, GDScript, to deliver malicious payloads. It has infected over 17,000 devices since June 2024. The distribution is linked to the Stargazers Ghost Network, a GitHub-based “Malware-as-a-Service” operation. The malware can target devices running multiple operating systems, reflecting a growing trend in cybercrime innovation.

Sophisticated crypter service Cruciferra evades detection with advanced techniques – SC Media
Sophisticated crypter service Cruciferra evades detection with advanced techniques SC Media


