Pirated Games and Emulators: The Malware You Download With Them

By Kim Njuki October 17, 2026 Updated: October 17, 2026 3 min read

The appeal of a free game is obvious. The problem is that cracked games have become one of the most reliable malware delivery channels in existence, and the numbers keep getting worse.

The scale of it

In 2026, Cyderes researchers reported that a loader dubbed "RenEngine" — hidden inside cracked versions of Far Cry, Need for Speed, FIFA, and Assassin's Creed — had infected over 400,000 devices worldwide, with the malware's own telemetry logging 4,000 to 10,000 new victims per day. The cracked game appears fully functional while silently installing an infostealer called ARC that harvests browser passwords, cookies, cryptocurrency wallets, and autofill data, per Malwarebytes.

An earlier Trellix investigation covered by Forbes found a "Dodi Repacks" download that ran a multi-stage HijackLoader infection — and, notably, it happened even with an adblocker installed, debunking the common piracy-forum claim that "as long as you have an adblocker you're safe."

It is not only pirated AAA games. Kaspersky documented a fan-made Super Mario game whose infected installer bundled a Monero miner and the Umbral stealer, which specifically hunts Discord, Telegram, Roblox, and Minecraft tokens.

Emulators are different — the sites are the risk

The nuance worth stating: legitimate emulators are not malware. An analysis of emulator safety is clear that the real danger comes from fake project pages, repackaged installers, and ROM/BIOS sites — not from PCSX2, Dolphin, PPSSPP, or RPCS3 themselves. The red flags are specific:

• The site asks you to disable your antivirus or SmartScreen.
• A "BIOS installer" or "ROM downloader" is required — game images should not arrive as executables.
• A ROM arrives as a .exe, .scr, .bat, or .cmd file — those are programs, not game images.
• The download is a lookalike domain or a cloned GitHub page.

The rule that covers all of it

Download from the official source, and treat everything else as suspect. For emulators, that means the project's own site or verified repository, not a download portal. For games, that means the store you already trust — and accepting that a game that is not free is not free. The cost of a cracked game is not zero; it is paid in stolen passwords, drained accounts, and a compromised machine.

Sources

• PCMag — Malware Hidden in Pirated Games Infects 400,000 Devices
• Malwarebytes — Pirated PC games are delivering password-stealing malware
• Forbes — If You Download This Game On Your PC, You Will Be Hacked
• Kaspersky — Malware in the free game Super Mario 3: Mario Forever
• laptop251 — Are Emulators Safe for Your PC?