A critical vulnerability has been identified in Unity that allows third parties to inject malicious code into mobile games. Android users are at the greatest risk, although the problem also affects Windows, macOS, and Linux.
The issue affects projects built on Unity starting from 2017. The threat is related to “in-process code injection,” that is, inserting foreign code into running processes. In some cases, this can lead to device compromise at the Android system level.
Even without full control over the device, malicious code can intercept input, create overlays, or collect data from the screen. This makes the vulnerability especially dangerous for crypto wallet owners: attacks can be aimed at stealing seed phrases and personal data.
Unity and Google reaction
Unity has not commented publicly yet. It is known that the company is already distributing patches and a separate tool to fix the bug among selected partners, but a public guide is expected only next week.
Google stated that it is aware of the issue and will support developers in accelerating the release of updated game versions. A company representative noted that, at the moment, no apps exploiting this vulnerability have been detected on the Google Play platform.
Recommendations for Users
Neeraj Khandelwal, co-founder of the crypto exchange CoinDCX and the wallet Okto, warned that gamers using mobile crypto wallets are especially vulnerable. He recommends updating Unity-based games immediately after patches are released, avoiding the installation of APK files from outside official stores, and using separate devices for gaming and for storing cryptocurrency.
The problem is mainly relevant for Android users. iPhone owners are not affected by this vulnerability.
Read also:
- Large-Scale Attack on NPM Puts Wallets and dApps at Risk – Details
- Mosyle Detects Virus Stealing Crypto Wallets Across All Operating Systems
- Attack on Shibarium Leads to $2.4 Million Loss and Network Function Suspension
This post is for informational purposes only and is not advertising or investment advice. Please do your own research before making any decisions.