Several popular Minecraft mods have been recently infected with malware, making it dangerous for people, especially children, to download them. The affected platforms CurseForge and Bukkit have several mods for both Windows and Linux, so players may want to avoid downloading new Minecraft mods for the time being.

Unsurprisingly, Minecraft had a very mod-friendly community for many years. The game is all about building stuff, and modders can either expand the gamers’ ability to play with the world or bring entirely new content for their experience. It’s not hard to find Minecraft mods that add new bosses, and biomes, or even completely overhaul the player experience in unexpected ways. Unfortunately, this also makes the title prone to being targeted by people with ill intentions, who may hide malware in the data to steal information from gamers.

Recently, both CurseForge and Bukkit, two famous platforms utilized to download Minecraft mods, were targeted by criminals who used them to plant malware on popular mods. CurseForge, for example, announced that an unknown malicious actor used the platform to create several accounts and upload mods that actually have malware. The criminal also hacked trustworthy profiles and used them to upload infected mods. The API on these websites automatically updates the game when mods that a gamer has installed are updated, so even people who do not download the infected mods may be affected. The hackers have replaced some really popular entries like Better Minecraft, Dungeons Arise, Sky Villages, Dunigeonz, Display Entity Editor, Haven Elytra, and others. Better Minecraft alone had over 4.6 million downloads, which showcases how big this breach has been.

We are looking into an incident where a malicious user uploaded projects to the platform. This is relevant only to Minecraft users and we have banned all accounts involved.

CurseForge itself is not compromised in any way! Please follow the thread below for more information 👇

— CurseForge (@CurseForge) June 7, 2023

At the moment, the affected platforms are trying to find all the compromised Minecraft mods and fix them, as well as improve their security measures to prevent further attacks. CurseForge also advised users not to delete their client, as this would not stop the malware, and would prevent the platform from being able to upload fixed mods and solve the issue. They also recommend the use of a first-party detector tool that can help affected players to see if they have malware hidden in their files.

So, players who are bored without access to new mods and want to find something interesting to do in Minecraft should look for in-game content for a while. Minecraft is filled with content and activities, so it’s not hard to find interesting activities like focusing on creating banners, visiting generated structures made by other players, or even playing on mini-game servers.

Minecraft is available on Mobile, PC, PS4, Switch, Xbox One, and legacy platforms.



Posted: Jun 12, 2023 10:56 pm
Related Forum: PC Gaming Forum

Source: https://gamerant.com/minecraft-mods-malware-infection/