fractureiser: Developers in Minecraft's biggest mod repository "CurseForge" hit with a virus/worm attack.

# [Fractureiser](https://github.com/fractureiser-investigation/fractureiser)

##### CurseForge, Bukkit, and Spigot themselves were not hacked.
---
#### The Timeline

* Malcious user uploaded an infected mod and steals accounts.
* At the same time, a well known developer was hacked.
* Threat actor uploaded new infected versions of several mods to the platform using hacked accounts, many a part of very popular modpacks.
* New stage was released that steals credentials, infects other jar files on the system, and more.

A visualisation of the …

accounts actor cybersecurity developer hacked hacked accounts mod mods platform popular stage threat threat actor timeline