A worm virus called "fracturizer" has been embedded in modpacks from various sites, including CurseForge and CraftBukkit.
Minecraft players should hold off on downloading any new mods or plugins while cybersecurity researchers try to track down a fix for malware ripping through the game.
A worm virus named "fracturizer" has been found embedded in popular Minecraft modpacks, several game themes pulled together, which are then used by players to toggle between multiple mods, giving the player more experience options, as well as helping the malware spread.
The fracturizer GitHub repository characterizes the malware as "incredibly dangerous" and adds that any infected machine should be assumed to be completely compromised by the threat actors behind the virus.
Contributing GitHub researchers found the malicious files going back for some time, with files dated back to April, as well as some files dated from 1999, a quirk with CurseForge they found notable.
CurseForge assured users in a statement added to the fracturizer GitHub page on June 7 that it is not compromised and has suspended accounts linked to the malware. The CurseForge added that its team is working on a fix.
GitHub also noted a command-and-control server linked to fracturizer has been was suspended by its hosting provider.
Minecraft mod players who want to check if they have been exposed to fracturizer can refer to a set of specific instructions on GitHub to look for indicators of compromise and take mitigation steps.
"We do not currently know the full extent of everything this can do, nor what its intent is, so extreme caution should be exercised until a complete way to remove any symptoms is found," the fracturizer GitHub researchers recommended. "Everything stated here is only what we know — please keep an eye on communication from the team on updates if anything critical is found."
About the Author(s)
You May Also Like
Guarding the Cloud: Top 5 Cloud Security Hacks and How You Can Avoid Them
April 4, 2024Cybersecurity Strategies for Small and Med Sized Businesses
April 11, 2024Defending Against Today's Threat Landscape with MDR
April 18, 2024Securing Code in the Age of AI
April 24, 2024
Black Hat USA - August 3-8 - Learn More
August 3, 2024Cybersecurity's Hottest New Technologies: What You Need To Know
March 21, 2024Black Hat Asia - April 16-19 - Learn More
April 16, 2024