Until recently, skins containing malware were available to download on the official Minecraft website, Minecraft.net. It's estimated that almost 50,000 users have been infected as a result.
Until recently, skins containing malware were available to download on the official Minecraft website, Minecraft.net. It's estimated that almost 50,000 users have been infected as a result.
As revealed by cybersecurity firm Avast, the malware was delivered inside PNG files used to apply new Minecraft avatar skins. Avast points out that by being distributed through the official Minecraft site, even warnings that the files were infected could be treated by users as a mistake.
The included malware is "designed to reformat hard-drives and delete backup data and system programs", and can send messages to infected users' email inboxes, like the charming: “You Are Nailed, Buy A New Computer This Is A Piece Of S**t”.
{video file = "News-Malware-Infected-Minecraft-Skins"}
IGN contacted Minecraft owner Microsoft for comment on several issues, but received a basic response from a spokesperson:
“We have addressed this issue and put additional measures in place to protect our community. We encourage players to report any suspicious activity to feedback.minecraft.net”.
Of particular concern is that mention was made as to whether Microsoft knows which users have been infected and if those users have been contacted. We'd suggest running a comprehensive virus scan if you've downloaded Minecraft skins recently.