Some variants emulate the official Epic Games launcher to bypass security suspicion.

The file (and similar variations like Fortnite Skin Checker.zip ) is widely recognized as a malicious archive designed to trick players into installing data-stealing malware. These files are often distributed through YouTube videos, Discord communities, or fake websites promising free V-Bucks, "skin changers," or cheats. Technical Breakdown of the Threat

It specifically searches for sensitive data, including Bitcoin wallets , Steam sessions , and Epic Games account credentials .

When a user extracts and runs the executable file (often named Anatomy.exe or Fortnite Skin Changer.exe ) inside the ZIP, it initiates several harmful processes:

The malware performs basic checks on the infected computer to gather hardware details and network information. Common Variants and Distribution Methods

Once harvested, the stolen data is sent via a POST command to remote servers, often located in the Russian Federation (e.g., using IP 5.101.78.169).