Malicious Blender model files deliver StealC infostealing malware

Avast cybersecurity.

• Russian hackers exploit Blender’s Auto Run feature to deliver StealC infostealer via .blend files
• Malware deployed through CGTrader assets, pulling payloads from Cloudflare Workers domains
• StealC variant targets browsers, crypto wallets, chat apps, and VPN clients undetected

Blender has a convenient but risky feature which experts have found is being exploited by Russian hackers to deliver infostealer malware.