When you download a mod, do you really know what you're downloading? Ideally, the answer is yes, but what if something malicious is hiding inside - and what if the creator of the mod didn't even know something malicious was inside?
CHAPTERS
0:00 - What is a Virus?
3:06 - A Mysterious Mod
7:45 - Inside the Virus
13:46 - The Dangerous Bit
16:58 - Aftermath
CREDITS
- The Fractureiser Mitigation Team (https://github.com/fractureiser-investigation/fractureiser/blob/main/docs/credits.md) for researching and stopping this virus, as well as publishing this info publically
- @_thomas , nwunder and Angry_Pineapple for proofreading
- Everybody else involved in this investigation
MUSIC (in order of appearance)
On Little Cat Feet - OneShot OST
Resurrections - Celeste OST
Divide By Four Add Seven - C418
Negative Gravity - Foewi
Tides - HOME
DISCLAIMER
Nothing in this video is even remotely close to being malicious, nor does it provide any sort of framework for a potential malicious actor. If you choose to seek out any of the code for this virus, I accept no responsibility for anything that may happen if you run it on your computer and I do not encourage you to seek it out.
LINKS & SOURCES
- Fractureiser Investigation Document: https://github.com/fractureiser-investigation/fractureiser
- Payload Analysis Document: https://hackmd.io/5gqXVri5S4ewZcGaCbsJdQ
- SkyRage Extra Reading: https://ljskatt.no/analysis/updater_class/
- CurseForge Detector & Blog Post: https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool/
- Minecraft Malware Community: https://discord.gg/zPdFK47682
Use code : "Hellcastle" in the hypixel store when checking out to support the channel :)
Get the blanca hat to have a cat on your head 24/7 whilst you mindlessly grind for items! : https://essential.gg/hellcastle
Follow us on twitter so we can see some meaningless numbers increase :
https://twitter.com/HellCastleBTW
https://twitter.com/tylerwith4rs
-------------------------------------------------------------------------------------------
Our discord server : https://discord.gg/duo
-------------------------------------------------------------------------------------------
Our Texture Pack video (includes the ones we use in videos) : https://www.youtube.com/watch?v=S54XupCvcgA&t
-------------------------------------------------------------------------------------------
Our mods folder video (includes the ones we use in videos) : https://youtu.be/3hSlsRBxXLs