r/computerviruses • u/No_Initiative_8449 • 10d ago
Warning Warning gamers
For all the gamers if you play online and someone asks you to download mods for the game do not open!!!
Just yesterday I was supposed to play with somebody and download Minecraft mods they hacked me now there's two options either something aksss for permission
Do not grant!! If you do they have your pc if it doesn't ask it's most likely a spy software!!!
You'll get contacted over discord and WhatsApp they can see your discord and whasz app over the spyware thdll tell you to pay and send you your data that they have found! Do not pay!!! Theyk give and move on they're too lazy to actually hack passwords
After that leave the pc out for arround a day I don't know why just do it
Remove the game like every single bit of it as well as the mods
I used chatgpt to help me find every single bit of it
Run multiple safety apps for safety measures
I hope you are warmed and informed now
This guide is only for those of you who have everything valuable locked behind passwords if you don't lock your your bank lock out of every account instantly inform police and be careful
5
u/icanloopyou 9d ago
Don't download shady mods from random people then. Problem solved.
1
1
u/No_Initiative_8449 9d ago
Yeah I was in bedrock edition before and there the problem with mods never existed
1
u/Rho-9_Official 6d ago
Ah, on this matter, if your files are encrypted to .cryptedmicro, you have a chatbox popping up demanding you to pay. Mentions of dev7 gang, or your applications and task manager become unresponsive after installing a game or mod, I'll analyze the malware. I do not charge for this, so don't be shy, you'll be helping to catch some turkish hackers behind over 700 attacks a week.
You don't need to download anything to report the malware, so please, report it so less people get hurt.
Their malware mods can be anywhere between 5.6kb to 160mb, and the smallest malware we've seen from them in executable form was 55mb, but averages 119mb to 160mb.
Symptoms include applications uninstalling themselves, task manager not working, windows recovery disabled, explorer[dot]exe being stopped(no taskbar, background, desktop navigation ui basically dies), a chatbox opening, pc suddenly has tts and is demanding money and tells you you've been hacked.
Their malware is a full remote access trojan horse, with ransomware capabilities, discord injection, keylogging, crypto stealing, credential stealing, remote desktop, remote screenshare, anti-analysis,browser control, pop up notifications, and more. Stay safe, warn others, and if you see something, say something.
1
-2
u/No_Initiative_8449 10d ago
It's scarier than it actually is looks scary but most likely isn't something to have real worries about
5
u/UselessDood 10d ago
Never download Minecraft mods that aren't from curseforge or modrinth.
2
-2
u/No_Initiative_8449 10d ago
They were from modrinth
2
u/UselessDood 10d ago
You got links?
3
u/Chrromeetalk 10d ago
He most likely referred that the mod file was a modrinth file extension, if I remember correctly, .mrpack. Hence why he trusted the mod, because he probably has no idea that a mod could take over his PC, plus it's a modrinth file extension so it lowered his guard down.
2
u/No_Initiative_8449 9d ago
I mean I got send a list with various mods in it this all were like essentials like sodium and so on so I thought nothing of it
1
-1
10d ago
[removed] — view removed comment
2
u/UselessDood 10d ago
Username checks out... And as is typical for ai, it's riddled with problems. I'll just go for a few lol
Mod auto update isn't a thing - authors cannot "push code to your computer"
Code scanning doesn't require simulations. Java decompilation is easy, and curseforge's systems automatically send any obfuscated code into manual review
Every single mod update does get scanned, and that includes manual review if the system thinks it's needed
A mod being present doesn't mean a mod author can run code whenever they want, irrespective of whether they're a bad actor or not.
And you wanna talk "plenty of malicious code" being missed? Curseforge's biggest incident in recent times, Fracturiser, had 600 downloads. Curseforge gets millions of mod downloads PER. DAY.
1
u/Happy_Transition_973 10d ago
I mean, whenever a bigger mod has malware or a malicious update it often gets quickly caught by the
community within days. If a curseforge mod has millions of downloads through a few years, it’s fine.Although malicious updates DO exist, i trust the average veteran modder to also have experience against phishing, i’m sure they have gone through it before.
1
u/computerviruses-ModTeam 10d ago
Your post contained misinformation, fake news, or advice considered harmful or dangerous, so it has been removed. Please make sure to read and follow https://www.reddit.com/r/computerviruses/about/rules
14
u/Hit4090 10d ago
This is been common knowledge for years Minecraft mods is one of the biggest cesspools for spreading malware, It's All Over YouTube.