Minecraft Malware Spreading Through Mods, Plug-ins

  /     /     /  
Publicated : 23/11/2024   Category : security


Minecraft Malware Spreading Through Mods, Plug-ins


A worm virus called fracturizer has been embedded in modpacks from various sites, including CurseForge and CraftBukkit.



Minecraft players should hold off on downloading any new mods or plugins while cybersecurity researchers try to track down a fix for malware ripping through the game.
A worm virus named fracturizer has been found embedded in popular Minecraft modpacks, several game themes pulled together, which are then used by players to toggle between multiple mods, giving the player more experience options, as well as helping the malware spread.
The
fracturizer GitHub repository
characterizes the malware as incredibly dangerous and adds that any infected machine should be assumed to be completely compromised by the threat actors behind the virus.
Contributing GitHub researchers found the malicious files going back for some time, with files dated back to April, as well as some files dated from 1999, a quirk with CurseForge they found notable.
CurseForge assured users in a statement added to the fracturizer GitHub page on June 7 that it is not compromised and has suspended accounts linked to the malware. The CurseForge added that its team is working on a fix.
GitHub also noted a command-and-control server linked to fracturizer has been was suspended by its hosting provider.
Minecraft mod players who want to check if they have been exposed to fracturizer can refer to a set of specific
instructions on GitHub
to look for indicators of compromise and take mitigation steps.
We do not currently know the full extent of everything this can do, nor what its intent is, so extreme caution should be exercised until a complete way to remove any symptoms is found, the fracturizer GitHub researchers recommended. Everything stated here is only what we know — please keep an eye on communication from the team on updates if anything critical is found.

Last News

▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂
Discovered: 23/12/2024
Category: security

▸ Nigerian scammers now turning into mediocre malware pushers. ◂
Discovered: 23/12/2024
Category: security

▸ Beware EMV may not fully protect against skilled thieves. ◂
Discovered: 23/12/2024
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
Minecraft Malware Spreading Through Mods, Plug-ins