

Some of the domain names include msi-afterburner-download.site, msi-afterburner.download, and .Īnyone who downloads and executes the fake MSI Afterburner setup file will find that the real version of the software is installed. CRIL writes that the campaigns involve phishing emails, online ads, and various other means of spreading links to the fake websites. You can download it safely here.īut that popularity has seen cybercriminals turn to MSI Afterburner as a way of distributing malware. It works on all graphics cards, making it very popular for those looking to squeeze every drop out of their GPU. MSI Afterburner is a free utility that lets you overclock, monitor, benchmark, and video capture. Researchers have found that a large number of websites have been impersonating MSI's official site to trick users into downloading malware alongside the overclocking tool.Ĭyble Intelligence and Research Lab ( CRIL) discovered several phishing campaigns that use MSI Afterburner to deliver XMR (Monero) cryptomining and information-stealing malware via 50+ fake replica websites. In brief: If you downloaded MSI Afterburner recently, it might be prudent to check your system for any malicious software.
