Fake Valorant beta key generators are stealing gamers’ passwords

With Riot Game's new eagerly anticipated tactical FPS game Valorant reaching closed beta, gamers around the world have been scrambling to get an invite so that they can start playing the game before its released.

As always, when something becomes popular or newsworthy, threat actors try to capitalize on it.

Such is the case with Valorant as attackers are releasing malware disguised as closed beta key generators, patches that allow the game to enter the beta, and even game cheats.

Fake Valorant tools delivery information-stealing malware

Soon after Valorant entered closed beta on April 7th, malware samples began to be released that targets users who are trying to play the game or get beta keys.

Most of the malware BleepingComputer has seen being installed are information-stealing trojans that will steal a victim's browser history, saved logins and passwords in browsers, SSH keys, and FTP accounts.

Some have more advanced functionality that allows attackers to execute commands on the victim's machines, take screenshots, or even log victim's keystrokes to steal passwords to online accounts.

Below are some malware examples that BleepingComputer and other researchers have seen impersonating tools related to the Valorant game.

Fake game key generators install

Most of the fake key generators being distributed for Valorant are installing information-stealing trojans such as QuasarRAT and njRAT.

Once installed, these types of malware will attempt to steal passwords stored in Chrome, Firefox, Yandex Browser, Opera, WinSCP, and FileZilla. Most also include some keylogger functionality and the ability to execute commands on the infected machine.

For example, Sophos threat researcher Albert Zsigovits discovered a fake Valorant key generator that, when executed, would download the source code of malware executable that was stored on Pastebin, compile it on the computer, and then execute it.

In this particular case, the compiled malware turned out to be njRAT. Other variants pretending to be key generators installed the QuasarRAT.

Freezes Windows

One malicious sample discovered by BleepingComputer is designed to freeze the system by using up all available resources. This sample is being distributed via Discord, so it may be a prank or a poorly developed malware.

Once executed, it will simply launch itself over and over until all of the system resources are used, and the computer freezes.

Don't download executables related to Valorant

While it may be tempting to try and download a tool that will generate closed beta keys, doing so will almost always land you with a computer infection.

As these infections can seriously compromise your computer, data, financial information, and could lead to identity theft, it is just not worth the risk.

This warning also includes other related tools such as game cheats, tweaks, and full versions of the game.

If you have downloaded and run one of these tools, it is strongly suggested that you change all the passwords on your computer and your accounts as they may have been stolen.

Comments are closed.