Malware
k2f-agent
- First Reported
- Nov 12, 2026
- Latest Reported
- Nov 12, 2026
Reported Context (1)
- or drop a malicious file into the game distribution. The payload was a Lua-based stealer (which we call k2f-agent) that arrived as obfuscated LuaJIT bytecode in the form of a perfectly ordinary log file. Attackers Abuse NIKKE Launcher to Deliver Lua-Based Credential Stealer
MITRE ATT&CK (12)
Vendors (1)
Products (10)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.