Gamers Beware! Fake Minecraft Mods Let Attackers Hijack Your System
ID: 55997486-b481-59bf-b312-a43f444e6a68
STIX ID: report--55997486-b481-59bf-b312-a43f444e6a68
Feed Name: Cyber Press
Threat Score
The report details the Stargazers Ghost Network, a Distribution-as-a-Service multistage malware campaign weaponizing malicious Minecraft mods hosted on GitHub and Pastebin; the attack uses Java loaders with anti-analysis checks and a .NET stealer to exfiltrate game credentials, messenger tokens, browser and wallet data, VPN profiles, and other sensitive files, and provides numerous IOCs (SHA256 hashes, URLs, and repositories) with indicators of a Russian-speaking actor.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.