Minecraft Mods Infected with Fracturiser Malware
Dozens of Minecraft mods hosted by CurseForge have been found to contain malware called Fracturiser, which infects Windows and Linux systems. The malicious files date back to mid-April, indicating that the account compromises have been active for weeks. The malware is delivered in stages and can propagate itself to all JAR files on the filesystem, steal cookies and login information for multiple web browsers, replace cryptocurrency addresses in the clipboard with alternate ones, and steal Discord, Microsoft, and Minecraft credentials. CurseForge has advised users to stop downloading or updating mods and has provided disinfection guidance.