InfoSec News Nuggets 11/26/2025
Threat Actors Exploit Blender Files to Deploy StealC V2 Infostealer Researchers have tracked a long running campaign in which attackers hide StealC V2 infostealer inside weaponized Blender project files shared on popular 3D asset marketplaces. When victims open these .blend files with auto run Python scripts enabled, embedded code silently launches a multistage infection chain that targets 3D artists and game developers who routinely import community models. New ClickFix wave infects users with hidden…