97
1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub (thehackernews.com)
submitted 1 year ago by to c/minecraft@lemmy.world
15 comments fedilink hide all child comments
 

A new multi-stage malware campaign is targeting Minecraft users with a Java-based malware that employs a distribution-as-service (DaaS) offering called Stargazers Ghost Network.

"The malware was impersonating Oringo and Taunahi, which are 'Scripts and macros tools' (aka cheats). Both the first and second stages are developed in Java and can only be executed if the Minecraft runtime is installed on the host machine."

you are viewing a single comment's thread
view the rest of the comments
[–] 54 points 1 year ago (12 children)

This is a slow-news-day story and affects neither you nor anyone you care about.

The malware was impersonating Oringo and Taunahi

As usual, these hacks target idiots using cheats and aimbots, downloading them from a fake repository on Github directly, which is no different than downloading an exe. 99.99% of Minecraft mods are fine, so is Prism, so is Modrinth.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 12 child comments
    •
  • [–] 3 points 1 year ago* (5 children)

    Me who uses these "cheats" (are they still cheats if there's noone getting hurt?) in singleplayer:

    0.0

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 4 points 1 year ago (2 children)

    What on earth would you need a cheat client for singleplayer? You already have full control of the game

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 1 year ago (1 child)

    Small qulity of live stuff. i.e. "Meteor client" allows me to put fireforks on a hotkey so I don't have to keep them in the hotbar/offhand. I also like that it shows me the trajectory of my arrows or fireballs or that it can automate Totems from the inventory so i can keep my offhand free (again).

    Just a lot of small stuff :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] -5 points 1 year ago (3 children)

    The fact that those people didn't even decompile the JAR files is amazing.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 21 points 1 year ago (2 children)

    You realize that like 0.1% if the population even knows what that means, much less would bother to do it? We're talking about the best selling video game of all time.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •