Malicious Blender Model Files Deliver StealC Information Stealing Malware

• Russian hackers exploit Blender’s Auto Run feature to deliver StealC information stealer via .blend files.
• Malware deployed via CGTrader assets, extracting payloads from Cloudflare Workers domains
• StealC variant targets browsers, crypto wallets, chat apps and VPN clients without being detected

Blender has a handy but risky feature that experts say is being exploited by Russian hackers to spread infostealer malware.

Cybersecurity researchers Morphisec observed the attacks in the wild and urged designers and other professionals to be vigilant.