Fracturiser Malware Spreads Through Minecraft Mods and Plug-ins

Hackers used the popular Minecraft modding platforms Bukkit and CurseForge to distribute a new 'Fractureiser' information-stealing malware through uploaded modifications and by injecting malicious code into existing projects. The attack compromised several CurseForge and Bukkit accounts and impacted popular modpacks such as 'Better Minecraft,' which has over 4.6 million downloads. The malware is capable of self-propagating, stealing cookies and account credentials, replacing cryptocurrency wallet addresses, and stealing Microsoft, Discord, and Minecraft account credentials. Minecraft players should avoid using the CurseForge launcher or downloading anything from the CurseForge or the Bukkit plugin repositories until the situation clears up.
- New Fractureiser malware used CurseForge Minecraft mods to infect Windows, Linux BleepingComputer
- Dozens of popular Minecraft mods found infected with Fracturiser malware Ars Technica
- Fractureiser malware can make Minecraft mods unsafe, here's how Sportskeeda
- CurseForge PC game mod users may have received malware as part of a recent hack Windows Central
- Minecraft Malware Spreading Through Mods, Plug-ins DARKReading
Reading Insights
0
1
4 min
vs 5 min read
90%
932 → 97 words
Want the full story? Read the original article
Read on BleepingComputer