They even used my Amazon web services account to run a Linux instance to help support the fake blender website and raked up over $1000 dollars in AWS charges. They will use your email to buy google Adsense ads which help to further promote the virus. They also target PayPal to make purchases on a website for buying pirated software licenses. I didn’t get the emails because they deleted them. I first found out about this when I got a notification from the Amazon app. It also does Amazon refund scams where they request a refund in something you bought in the form of a gift card and then redeem the refund balance. It makes purchases on these websites and deletes your emails so you don’t know about it. If it finds these websites it will use your compromised email account to gain access to websites which store your payment information.

It looks through your emails to find accounts for websites which are probably on a list of target websites. The Trojan controls google chrome and gains access to your gmail account. When you download blender it fails to install and secretly downloads a Trojan undetectable by antivirus. The website is a identical version to the authentic one.

The virus buys google ad sense ads with redirects you to the fake blender website.

Blender eevee download