Cybersecurity researchers uncovered a campaign using malicious Blender files to deliver the StealC V2 information stealer. Users download infected .blend files from sites like CGTrader, which execute harmful scripts when opened, compromising their data. The attack takes advantage of Blender's Auto Run feature, allowing attackers to bypass security measures.

This GitHub repository hosts CrackFtp, a script that tests FTP login credentials on a large scale. It supports brute-force attacks and sends Telegram alerts for successful logins. Users can customize and run it for security assessments of their domains.