Beware of Hamster Kombat: How Cybercriminals are Exploiting Gamers with Malware and Scams

Hot Take:

*The cybercriminals targeting Hamster Kombat players must be laughing their way to the bank, thinking, “Who knew hamsters and cryptos would be the perfect scam combination?”*

Key Points:

• Hamster Kombat, a popular new mobile game, is being used as bait for malware distribution.
• The game is Telegram-based, requiring players to join a channel, scan a QR code, and launch a web app.
• Cybercriminals have created fake apps and websites luring players into downloading spyware and malware.
• Ratel Android spyware and Lumma Stealer for Windows are among the malicious software being distributed.
• Users are advised to download the game only from its official Telegram channel and remain cautious about its security.

Hamster Kombat: The Game That Became a Scam Magnet

Hamster Kombat, a clicker mobile game launched in March 2024, has quickly become a sensation with over 250 million players and a Telegram channel boasting 53 million users. The game’s allure lies in its promise of earning a new TON-based crypto token later this year. However, its rapid rise to fame has also made it a prime target for cybercriminals who are exploiting its popularity to spread spyware and malware.

Telegram: Where Hamster Kombat Thrives and Threats Lurk

Since Hamster Kombat operates primarily through Telegram, users are required to join a specific channel, scan a QR code, and launch a web app on their Android devices. This setup has proven to be fertile ground for scammers. Fake channels and clone apps are proliferating, distributing malware under the guise of legitimate game downloads. ESET, a cybersecurity firm, has identified several such malicious channels and apps, including one named ‘HAMSTER EASY’ that spreads Ratel Android spyware.

Ratel Spyware: When Clicking Turns Costly

The Ratel Android spyware, disguised as ‘Hamster.apk,’ offers no actual gameplay. Instead, it intercepts SMS and device notifications, subscribing victims to premium services without their knowledge. This sneaky malware hides notifications from 200 apps, ensuring that users remain blissfully unaware of their growing subscription bills while the malware operators earn a cut.

Not Just Android: Windows Users Beware!

The threat isn’t confined to Android users. Cybercriminals have also set their sights on Windows users, leveraging fake websites and malicious GitHub repositories. Websites like ‘hamsterkombat-ua.pro’ and ‘hamsterkombat-win.pro’ redirect visitors to ads, generating revenue for the scammers. Meanwhile, GitHub repositories claiming to offer farming bots for the game are distributing Lumma Stealer, a malware that comes in C++, Go, and Python flavors. The Python version even features a graphical installer to make the deception more convincing.

Security: The Achilles’ Heel of Hamster Kombat

Even if you manage to dodge the fake apps and websites, downloading the genuine game from its official Telegram channel doesn’t guarantee safety. The game hasn’t been scrutinized for security, and its whitepaper and token launch promises remain unfulfilled. Reports of a clone app on Google Play scamming users by charging withdrawal fees and never performing the actual withdrawal further muddy the waters.

Expert Advice: Trust No Hamster

Experts advise that anyone interested in Hamster Kombat should only download it from the official Telegram channel. Even then, exercise caution, given the lack of security scrutiny. If you’re intrigued by the concept of earning crypto through gaming, consider checking out other projects with established security measures and functional systems. Decrypt.co has compiled a list of such projects launched in 2024, which might be a safer bet.

Conclusion: Scam or Be Scammed

In a world where even hamsters aren’t safe from cybercriminals, vigilance is your best defense. Whether you’re a die-hard Hamster Kombat fan or just curious about crypto gaming, ensure you’re downloading apps from official sources and remain skeptical of too-good-to-be-true promises. As the saying goes, “If it looks like a scam and quacks like a scam, it’s probably a scam.”

There you have it, folks! The tale of Hamster Kombat: the game that’s as likely to steal your data as it is to entertain you. Stay safe, and may your taps be merry and malware-free!