'Minecraft' stolen account list is actually ransomware that attacks cheaters – NME

Share on facebook
Share on twitter
Share on linkedin

The equivalent of a £12 ransom can only be paid on Saturdays, so the hacker has apologised for the inconvenience
Japanese Minecraft players have been given quite the shock as a list posing as alternative account details for cheaters turns out to actually be a ransomware file.
This was reported by Fortinet (thanks, PC Gamer) a few days ago (October 28), as Minecraft players in Japan have been looking for, and downloading, what they think is a list of stolen account usernames and password. As it turned out, one such list turned out to be a “variant of Chaos ransomware” that is encrypting and destroying some files for those who download it.
These players are likely downloading what they think are account lists so they can protect their main accounts whilst they do things like use cheats, troll, and other actions that would generally lead to a ban.

Minecraft
Minecraft. Credit: Mojang Studios

According to Fortinet, exactly how the fake list is being distributed is currently a mystery, but the publication believes it is being advertised on Minecraft forums for Japanese players. The ransomware is posing as a text file via an icon, but when it is downloaded it uses malware on files.
Anything under 2,117,152 bytes on the computer is encrypted, whilst anything over that is filled with random bytes so the downloader can never get those files back. The reason this is classified as ransomware is because after the attack, a ReadMe text file asks the victim to pay with bitcoin or a pre-paid card.
Those infected with the ransomware can only get it sorted through on a Saturday however, as Fortinet say the ransom note adds “that the attacker is available only on Saturdays and apologises for any inconvenience caused,” as they ask for 2,000 yen (approximately £12.91 or $17.62 USD).
If that wasn’t enough, the ransomware also changed the users desktop wallpaper to a black background with red text, with a message asking the impacted user to pay the ransom.

In the other news, a New World exploit around gold has forced Amazon Game Studios to disable “all forms” of wealth transfers whilst it looks for a fix.
The world’s defining voice in music and pop culture: breaking what’s new and what’s next since 1952.
When you purchase through links on our site, we may earn an affiliate commission.
© 2022 NME is part of NME Networks.

source

Bellscord

Bellscord

Leave a Replay

About Us

Bellscord is a Gaming Community which hosts its own Minecraft Server and Discord Community. Bellscord Communities can be found across multiple platforms. Our aim is to build a big and active community.

Recent Posts