Minecraft players targeted by criminals posing as coders in ‘malicious’ attack

20 June 2025, 22:35

Over 1,000 devices are thought to have been affected by the malware.
Over 1,000 devices are thought to have been affected by the malware. Picture: Alamy

By Ruth Lawes

Cyber criminals masquerading as game coders have deployed a multi-stage attack to “quietly” infect Minecraft players’ devices.

Listen to this article

Loading audio...

Around 1,500 devices are thought to have been compromised by the “malicious” malware campaign, according to cybersecurity firm Check Point.

Researchers claim the software, which was created to steal from bank accounts, cryptocurrency wallets and applications, was developed by a Russian-speaking attacker.

The malware poses as popular Minecraft mods like Oringo and Tanuahi, commonly known as cheat tools within the community, to gain access to users’ devices.

Check Point said: “The infection begins when a player downloads the seemingly harmless Minecraft mod from GitHub.

Read more: Russian gang’s cyber attack on blood services ‘harmed 170 patients’

Read more: 23andMe fined millions by watchdog after ‘profoundly damaging’ cyber attack exposing genetic data

A Russian-speaking attacker is thought to have developed the malicious software.
A Russian-speaking attacker is thought to have developed the malicious software. Picture: Getty

“Once the game is launched, the mod checks whether it’s operating in a virtual environment, a common approach used by security researchers and sandboxes to run samples in an isolated environment.

“If no virtual environment or analysis tools are detected, it proceeds to the next phase.The malicious mod then downloads a second-stage payload designed to steal sensitive information.

“This is followed by a third and final component: a more advanced spyware tool capable of harvesting credentials from web browsers, cryptocurrency wallets, and applications such as Discord, Steam, and Telegram. “It can also capture screenshots and collect detailed information about the infected system.”

A Minecraft spokesperson told Sky News that player safety is a "top priority for us" and the company is "committed to investigating reported security violations."

Minecraft is the best-selling video game of all time.
Minecraft is the best-selling video game of all time. Picture: Alamy

"When we receive reports of content that does not comply with our usage guidelines, we take action as appropriate," they said."We encourage players to report any suspicious content through our official website and leverage our resources to make informed choices."

Minecraft is the best-selling video game of all time, becoming the first to sell over 300 million copies in October 2023.

Each month, there are over 200 million active players and around 65% of those are said to be under the age of 21, according to Check Point. Minecraft is a “sandbox” game, meaning users have a high degree of freedom and can create their own virtual worlds and experiences.

The first alpha version of Minecraft was launched in 2009 before it was given a full release two years later.

LBC has contacted Minecraft for comment.

More Technology News

See more More Technology News

A blurred laptop screen

Ofcom boss: Tech firms not given much power over how to protect children online

European Space Agency astronaut Tim Peake (PA)

No limit to ChatGPT searches ‘remarkable’ given environmental impact – Tim Peake

The Grok X AI logo is displayed on a mobile phone with Grok seen in the background

Elon Musk's chatbot that praised Hitler was 'trained to use his personal beliefs'

Top view of the Milky Way galaxy showing the estimated orbits of both our Sun and the 3I/ATLAS comet

Mysterious space object may be oldest comet ever discovered, scientists say

Children with multiple long-term health issues undergo severe emotional stress at the same time as they are trying to cope with the physical challenges of their conditions, a study has found (Dominic

Children’s social media activity ‘highlights stress of living with health issue’

Scientists at Sheffield Hallam university have developed a new technique which they describe as a "powerful double weapon" to prevent cancer patients losing their hair during chemotherapy.

New technique hailed as ‘powerful double weapon’ against chemotherapy hair loss

Elon Musk

Elon Musk says his new AI model ‘better than PhD level in everything’

President of France Emmanuel Macron with Sir Keir Starmer

UK and France agree ‘Entente Technologique’ to help protect infrastructure

SHANGHAI, CHINA - JUNE 18, 2025 - The Nvidia logo displayed on a smartphone in Shanghai, China on June 18, 2025. (Photo by CFOTO/Sipa USA)

Nvidia becomes world’s most valuable listed company at $4trn

Surgical Robot

Robot performs realistic surgery ‘with 100% accuracy’

Peter Kyle outside the BBC smiling

Government makes deal with Google to provide free tech for UK public services

Former Wimbledon line judge Pauline Eyre

Wimbledon technology change ‘has turned officials into glorified butlers’

The Grok X AI logo is displayed on a mobile phone with Grok seen in the background

Elon Musk's Grok chatbot forced to delete a slew of posts after praising Adolf Hitler

Linda Yaccarino, chief executive officer (CEO) of X Corp. attends the ceremony for the signing of S.146, The TAKE IT DOWN Act at the White House in Washington, DC.

X CEO quits just two years after she was hired by Elon Musk

Exhibitor Meta showcasing the Ray-Ban Meta AI glasses at the annual British Educational Training and Technology conference at ExCeL London

Meta opens Cambridge lab as part of AI glasses expansion

Palantir NHS contract

Doctors against Palantir’s NHS software put ‘ideology over patient interest’