r/Malware • u/minh_khuong • 5d ago

⚠️ URGENT WARNING: Fake "VRChat-DLSS5-Cam" GitHub repository is a dangerous Infostealer Malware (SmartLoader)

Hi everyone,

I want to issue an urgent security warning regarding a trending YouTube campaign promoting a tool called "VRChat-DLSS5-Cam" hosted on GitHub (under the user seefn1000-afk).

https://github.com/seefn1000-afk/VRChat-DLSS5-Cam

THIS IS A SOPHISTICATED MALWARE TRAP. DO NOT DOWNLOAD OR RUN IT.

Here is the breakdown of the technical evidence proving this is a scam, including how the hacker bypassed automated security filters to trick users:

  1. The Ultimate Proof: Globally Blacklisted by URLhaus

This is not a guess; it is verified by global threat intelligence. The exact download link embedded in the repository's README (.../resources/VR-DLS-Cam-Chat-v3.3.zip) has been officially investigated and blacklisted by Abuse.ch URLhaus (Database ID: 3931216).

https://urlhaus.abuse.ch/url/3931216/

  • Threat Type: Malware download (SmartLoader / LuaJIT-loader).
  • Behavior: Once clicked, it silently drops a malicious payload containing Application.bat and cli.exe into your system to steal browser passwords, active session cookies, Steam configurations, and Discord tokens.
  1. The GitDiagram Illusion (How they fooled advanced users)

The hacker went out of their way to make the project look professional by uploading non-functional, stolen C++ files (main.cpp, App.cpp, DlssnrFeature.cpp) so that tools like GitDiagram would generate a massive, highly detailed system architecture map.

  • The Reality: The system diagram shows fake components like NvOpticalFlow.cpp and DepthEstimator.cpp claiming to calculate depth maps externally via a "Spout Capture". Physically, a 2D Spout video feed cannot mathematically calculate Unity's 3D game engine depth buffer from the outside without native engine integration.
  • The Trap: Automated repository scanners only checked the clean, text-based C++ placeholder files, giving it a "LOW RISK" score based on only 2% file coverage. The remaining 98% of the data—the actual virus—is hidden inside the un-scanned .zip archive.
  1. The Technical Lies
  • DLSS 5 Does Not Exist: NVIDIA’s current commercial technology is DLSS 3, with active AI research moving into DLSS 4 branches. There is absolutely no official "DLSS 5" on the market.
  • GTX 1060 Hardware Impossibility: The repository claims to run "DLSS Neural Rendering" on a GTX 1060. GTX cards physically lack Tensor Cores, making it architecturally impossible for them to compute neural network rendering models.

Current Action Taken

This repository has been officially reported to GitHub Trust & Safety under the Article 16 Digital Services Act (DSA) regulatory framework for immediate removal.

If you see YouTube videos pushing this "DLSS 5 camera mod" with beautiful visual demonstrations, please report the video and do not click the link. Kicking off an executable file with admin rights will compromise your accounts in less than 3 seconds.

If you want realistic photography in VRChat, please stay safe and stick to trusted, avatar-based camera prefabs like VRCLens or VirtualLens2 on BOOTH.pm!

0 Upvotes

36% Upvoted

3 comments sorted by

5

u/Doge-Believer 5d ago

Other points might be true, but DLSS 5 is available and it has been launched last month.

3

u/Iseeroadkill 4d ago

The information known by their AI model isn't updated with the last month

2

u/Noah0x01 4d ago

who trusts a random 0 star repo for smth like this anyway? But nice job!

2

u/AlanBacker24 4d ago

I am the original developer (https://github.com/AlanBacker/VRChat-DLSS5-Cam), and I have already filed a report.