North Korean threat actor ScarCruft has compromised a gaming platform to distribute BirdCall malware targeting both Android and Windows users. The sophisticated supply chain attack represents a concerning evolution in the group's tactics, using legitimate gaming infrastructure to bypass security defenses and deliver malicious payloads. Security researchers warn this campaign demonstrates increasing sophistication in targeting gaming platforms, which often have large user bases and trusted distribution channels.