Malwarebytes Follow Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding We look into how attackers are using the legitimate Ren'Py game engine to spread a malware loader that ultimately delivers Amatera Stealer. https://www.malwarebytes.com/blog/threat-intel/2026/07/fake-games-spread-stealers-with-renpy-loader-msbuild-and-etherhiding malwarebytes.com