Evasive Node.js loader masquerading as game hack - Help Net Security

Malware peddlers are using NodeLoader, a loader written in Node.js, to deliver infostealers and cryptominers to gamers. The loader, disguised as a game hack, downloads additional malicious files, including XMRig and Phemedrone, which steal login credentials and engage in detection evasion. Node.js’s cross-platform capabilities and large file size make it difficult for security products to detect.