
Image by Nina Rivas, from Unsplash
Fake Minecraft Mods Used To Steal Gamer Data
- Written by Kiara Fabbri Former Tech News Writer
- Fact-Checked by Sarah Frazier Former Content Manager
Minecraft players are now being targeted by an advanced cyberattack that disguises itself as game mods.
In a rush? Here are the quick facts:
- Fake Minecraft mods spread malware via GitHub to steal gamer data.
- Attack requires Minecraft installed, evading many antivirus systems.
- Stolen data includes Discord, Telegram, wallets, and Minecraft credentials.
Check Point researchers have found that hackers are distributing fake modifications through GitHub, which pretend to be popular tools like Oringo and Taunahi, to spread a multistage malware chain. The Stargazers Ghost Network uses Java-based malware designed to target systems that run Minecraft.
Researchers Jaromír Hořejší and Antonis Terefos explain that this stealthy and highly targeted operation uses these fake mods to trick players into installing malware that antivirus software has difficulty detecting.
The attack starts with a Java-based fake mod, which serves as a downloader. When the malware activates, it downloads a second-stage, Java-based malware, which subsequently downloads a third-stage, .NET-based stealer. The final malware in the chain steals sensitive information, including Discord and Telegram tokens, Minecraft credentials, and cryptocurrency wallets. It also captures screenshots and monitors clipboard activity.
The malware stops its execution if it detects any indication of a virtual machine or analysis software, according to Check Point. Its stealth is enhanced because it requires Minecraft to run, reducing the likelihood of triggering alerts from general-purpose scanning tools.
The hacker group appears to be Russian-speaking, based on time zone data and Russian-language file artifacts. The attackers, using the usernames “JoeBidenMama” and “P1geonD3v,” have uploaded the malware repeatedly to Pastebin and GitHub.
With more than 200 million monthly Minecraft players worldwide, game mod communities are increasingly vulnerable to malware attacks, researchers warn. The team advises gamers to exercise extreme caution when downloading third-party mods.
Check Point recommends using endpoint protection and avoiding mods from untrusted sources—especially those offering cheats or enhancements that seem too good to be true.

Photo courtesy of Zoox, Inc
- Written by Andrea Miliani Former Tech News Expert
- Fact-Checked by Sarah Frazier Former Content Manager
In a rush? Here are the quick facts:
- Zoox opened its first serial production facility to build robotaxis in the Bay Area.
- The new facility measures 220,000 square feet and has the capacity to assemble over 10,000 robotaxis per year.
- The company expects to expand its services across Las Vegas, San Francisco, Austin, and Miami.
According to the press release , this is Zoox’s second facility in the Bay Area and is located in Hayward. What makes the new location special is its size, 220,000 square feet, and its capacity to assemble over 10,000 robotaxis per year.
Zoox expects to produce more robotaxis to match the demand for its services in multiple cities in the United States. The company will focus first on Las Vegas, then San Francisco, Austin, and Miami.
“This facility is used for a myriad of different operations, including robotaxi engineering and software/hardware integration, robotaxi assembly, storage of robotaxi components, shipping and receiving, and end-of-line testing required before the robotaxis are deployed,” explained the company.
The new facility combines the work of robots and humans to assemble the robotaxis. The robots focus on tasks such as applying the adhesive for glass installation and transporting the vehicles, while humans handle the rest of the work.
As part of its expansion, the company emphasized that its mission to scale production and services will soon create hundreds of new jobs in the region.
The automotive company also expressed its commitment to reducing air pollution and noise, and added that, compared to traditional facilities, it has a low power draw.
Zoox is a major competitor in the dynamic robotaxi market in the United States. It faces competition from similar services, such as those offered by Waymo—which recently partnered with Uber to launch its services in Austin —and Tesla, which announced a new robotaxi service called Cybercab a few months ago.