A Russian-linked campaign delivers the StealC V2 information stealer malware through malicious Blender files uploaded to 3D model marketplaces like CGTrader.
Malicious CGTrader .blend files abuse Blender Auto Run to install StealC V2, raiding browsers, plugins, and crypto wallets.
Some configurations you can find online also contains Blender default transforms. But most of them are totally wrong. Since scene linear in Blender's default config is Rec.709+Linear while scene ...