MILLIONS of Minecraft players are at risk of having their sensitive information stolen in the recent “undetected” attack.
All 200 million users could have their money stolen after a research has uncovered a “malicious” campaign.
Millions of Minecraft users risk having money stolen in a recent attack[/caption]
CheckPoint Research has revealed through their investigation that Minecraft users are being targeted through mods.
The popular game allows players a creative freedom via mods, which are additions to a game made by fans.
Minecraft players can download mods to enhance their gaming experience but they have to be careful.
When you install a new mod, you could be inviting a virus onto your computer.
According to CheckPoint Research, a large-scale malicious campaign has been targeting mods to infect people’s devices.
The malware has been spread through Minecraft modding system as well as GitHub.
A network of Github accounts, dubbed Stargazers Ghost Network, has been impersonating popular cheats and scripts “Oringo and Taunahi”.
They provided mods which appeared legitimate as multiple accounts starred them.
The first and second stages of the attack are developed in Java and can only be executed if the host computer has the Minecraft runtime.
These files would then carry out a “multi-stage attack” to breach systems and steal victims’ personal information.
Since March 2025, Check Point Research has been attempting to monitor these “malicious GitHub repositories.”
The malware has gone undetected by all antivirus engines on VirusTotal as they are specifically targeted at Minecraft users.
Their research listed all the information that may be stolen, including private conversations sent through Discord, cryptocurrency wallets, browser logins, and much more.
Gamers have been warned to exercise caution when downloading third-party content.
It comes after a colossal leak exposed as many as 16 billion logins for Apple, Facebook and Google users.
It’s one of the largest data breaches in history giving hackers “unprecedented access” to your personal info and online accounts, experts warn.
Logins for Instagram, Microsoft, Netflix, PayPal, Roblox, Discord, Telegram, GitHub and various government services in more than 29 countries, including the UK and US, have also been affected.
