News

Minecraft Mods on Curseforge Compromised With Malware

CurseForge is a platform used for modding various games and one of the most popular games that use this service is Minecraft where Malware has been found embedded into various projects on the site.

CurseForge Malware in Minecraft Mods

The information around this issue has been shared across Minecraft communities including r/feedthebeast and prismlauncher, a custom launcher for Minecraft. The reports share that malware by the name of “fractureiser” has been uploaded which consists of three stages with the infected mod files from CurseForge and Bukkit acting as “stage 0”. The final “stage 3” of the malware is supposedly capable of stealing user credentials and propagating itself into all jar files on the filesystem possibly enabling it to infect other mods not downloaded from CurseForge. For now, it is advised to avoid playing Minecraft, especially modded, to ensure that this Malware doesn’t spread. It is also worth noting that it has been seen on older mods so even if you haven’t used CurseForge recently it could still be there.

A team at hackmd.io has shared a detailed guide on locating infected files to see if you are infected where the malware has hidden itself as a Microsoft Edge file in appdata. That same team is also working on reverse engineering the Malware and is working to get detection software distributed. The Curseforge team has also released a statement and has banned involved accounts sharing the malware and has put their file approval process on hold until this is resolved.

I’ve recently used CurseForge and my PC has started behaving strangely with several crashes so I think I may need to quickly douse my PC in petrol. It is also possible I’ve just done something else stupid.

Jakob Aylesbury

Disqus Comments Loading...

Recent Posts

Fortnite Main Battle Royal Mode Was Thought up in the Back of an Uber

No matter who you are or where you are it's pretty sure thing that you've…

27 mins ago

Philips Evnia 42″ 3840×2160 OLED 138Hz 0.1ms A-Sync HDR Widescreen Gaming Monitor

Low input lag reduces time delay between devices to monitor SmartImage game mode optimised for…

1 hour ago

Alphacool Apex Stealth Metal fan 2000rpm Matte Black

High-quality, elegant as well as timeless design and technical innovation - these are the features…

1 hour ago

NZXT T120 RGB Performance 120mm CPU Cooler

Aluminum heat pipe cover discreetly hides copper piping 4 conductive copper heat pipes with Direct…

2 hours ago

ASUS ROG Ryujin III 240 ARGB Performance AIO CPU Liquid Cooler

The customizable ARGB fans snap together with a magnetic connector that links the fans and…

2 hours ago

Varmilo VEA88 CMYK Gaming Keyboard, MX-Red, White-LED

TKL mechanical keyboard with 88 keys in a UK ISO layout V-silk PBT keycaps with…

2 hours ago