1. Coming up next...
    Saturday 26th May @ 18:30 GMT - Happy 7th Birthday, us! Come join the party for our cakeday!
  2. We've moved!
    Cubic Worlds has recently moved to a new host and our new IP is 185.52.52.135. Our play.cubicworlds.net shortcut should be updated and good to use as well. Keep an eye on this thread or Discord for full details.

PSA: Minecraft skins infected with malicious code

Discussion in 'General Minecraft Chit-chat' started by Zolyx, Apr 18, 2018.

  1. Zolyx

    Zolyx Evil Op

    Messages:
    3,859
    Location:
    The space between pixels
    Avast, a company you may know for their antivirus software and general research into viruses, made a blog post yesterday about a rather incredible topic...

    Someone's managed to put malicious code - basically, a virus - into several Minecraft skins, and it's already affected close to 50,000 players.

    Players who download an infected skin are at risk of damaging their PC, as the virus will try to delete important Windows files - and in some cases, even completely format any installed storage drives.

    [​IMG]
    These are some examples of skins that Avast said were infected

    Mojang have been told about the problem and are working to fix it. Until we get the all-clear from them, be very careful about changing your skin, especially if it is similar to one of the three skins pictured above.

    If you have some antivirus software on your PC then the chance of damage is greatly reduced. If you aren't, well... I highly recommend using a free version from someone like BitDefender, Avira, or Avast themselves. Don't rely on Windows Defender alone!

    EDIT: Mojang have posted some clatification on minecraft.net to update everyone, explaining that apparently this virus was never really a problem and got blown out of proportion.
     
    Last edited: Apr 20, 2018
  2. Wiimaster101

    Wiimaster101 Citizen

    Messages:
    377
    Location:
    Inkopolis
    Huh, this is incredibly strange.
    I've heard of files being malicious, but Minecraft skins?
    Huh.
     
  3. StoneBrine

    StoneBrine Citizen

    Messages:
    109
    Location:
    The depths of The End
    But how doe? It's not like you can just stick a virus inside of a png without something being very suspicious about it. Whether it's the size or the fact that it's a file, it should be easy to tell.
     
  4. StoneBrine

    StoneBrine Citizen

    Messages:
    109
    Location:
    The depths of The End
    Although I guess for those who it's their first time downloading a skin, (I imagine there's a lot of them) it's not weird.
     
  5. Zolyx

    Zolyx Evil Op

    Messages:
    3,859
    Location:
    The space between pixels
    Update: Apparently Mojang have this all sorted and there was no real danger after all. :p

    Seems like the virus was added into the PNG file's "metadata", the area of the file that describes the image, what program was used to create it, and other stuff like that. Mojang say that Minecraft wouldn't even read this data let alone have the ability to execute it. You'd need to consciously copy the virus code from the metadata and then somehow run it yourself, which no sane person would ever do.
     
  6. brickviking

    brickviking Mod Squad

    Messages:
    857
    Location:
    Here, of course.
    Ahh, but some computer monke... users aren't sane. They think that Format /y c: will simply alphabetise their drive contents for them again. They'll generally believe what they get told by someone else because they know no better, and can't be bothered spending the time getting to know that sort of stuff when they've got better things to do with their time.

    And let's face it, what Minecraft user doesn't want a free cape? They're pretty hard to get unless you've spent money on attending a MineCon.

    (Post 875)
     

Share This Page