Minecraft Players Beware: These Mods Can Steal Your Wallets and Web Credentials

A new malware is targeting Minecraft players, using fake mods and cheat tools to spread information-stealing software. According to researchers at Check Point, the attack uses a distribution-as-a-service (DaaS) option called Stargazers Ghost Network, which relies on hundreds of GitHub accounts to set up fake repositories. These repositories pretend to be cracked software or game cheats, looking trustworthy to users searching for mods.

The attack starts when a player downloads a fake mod, such as "Oringo" or "Taunahi," from GitHub. These files are Java-based and only work if the Minecraft game is installed on the computer. Once added to the Minecraft mods folder and loaded by the game, the malicious file quietly downloads a second Java program. This program then fetches a .NET-based information stealer, which is able to collect a wide range of data from the victim's computer.

The information stealer is reported to be able to take ...