The malware known as Super Mario 3 disguises itself as a video game from the popular Super Mario franchise, specifically the fan-made Super Mario 3: Mario Forever game, but it actually contains malicious components, including XMR miner and SupremeBot mining client, which aim to extract sensitive information from victims’ systems and exploit their resources for cryptocurrency mining purposes.
Super Mario 3 Malware Overview
| Name | Super Mario 3 |
| Detection | Trojan:Win32/Vigorf.A on VirusTotal |
| Damage | Exploits your hardware to mine cryptocurrencies without your permission. |
The Umbral stealer employs various techniques to avoid detection, including requesting admin privileges, terminating itself if launched on a virtual machine, adding itself to the exclusion list of Microsoft Defender, attempting to disable the Defender Antivirus, blocking access to reputable antivirus software websites, and adding itself to system startup programs.
Umbral targets a range of browsing-related data, including Internet cookies and login credentials, as well as information from messaging software, such as Discord tokens and Telegram session files. It also focuses on video game data, such as Roblox cookies and Minecraft session files, and has the ability to capture screenshots and snapshots using the device’s camera.
Infections caused by Super Mario 3 and similar malware can have severe consequences, including privacy breaches, permanent data loss, hardware damage, significant financial losses, and the risk of identity theft.
The Super Mario 3 malware targets the following web browsers:
- Google Chrome
- Microsoft Edge
- Brave
- Chromium
- Comodo
- EpicPrivacy
- Iridium
- Opera
- OperaGx
- Slimjet
- UR
- Vivaldi
- Yandex
The Super Mario 3 malware targets the following cryptocurrency wallets:
- Armory
- AtomicWallet
- Bytecoin
- Coinomi
- Electrum
- Ethereum
- Exodus
- Guarda
- Jaxx
- Zcash
Examples of Similar Malware
While investigating numerous malware samples, we have come across various types of threats, including cryptominers like RedEnergy, RDStealer, and FadeStealer. It is important to note that all forms of malicious software pose a risk to device integrity and user safety, and prompt removal of these threats upon detection is strongly advised.
How Did Malware Infiltrate My Computer?
Given that Super Mario 3 malware disguises itself as a video game, it is likely distributed through typical channels used for acquiring such content. This includes deceptive websites posing as trusted download sources, freeware and free file-hosting platforms, Peer-to-Peer sharing networks, and similar sources.
Phishing and social engineering tactics often play a significant role in the spread of malware. Malicious programs are frequently disguised as legitimate and harmless software or media. In addition to executable files, malware can be found in various formats.
Malware is also commonly distributed through stealthy drive-by downloads, pirated software and illegal cracking tools, malicious attachments and links in spam emails or messages, online scams, malvertising, and fake updates.
Furthermore, some malware can self-propagate through local networks and removable storage
devices, such as external hard drives and USB flash drives.
How to Avoid Malware Installations
To minimize the risk of malware infections, it is highly recommended to research software and download only from official and verified sources. Activation and updates of programs should be done through legitimate functions and tools, as third-party sources may contain malware.
Vigilance while browsing the internet is crucial since fraudulent and malicious content often appears genuine and harmless. Caution should be exercised when encountering suspicious or irrelevant emails and messages, avoiding opening attachments or clicking on links that may be infected.
Leave a Comment