Updated:08:40 AM CEST Sep,07
(new)
(c) 1998-2026 Gameguru Mania
Privacy Policy statement
|
Fake Lithium Mod Drops Myth Stealer RAT - briefly|
| (hx) 08:40 AM CEST - Sep,07 2026 |
A researcher published a teardown of a fake Minecraft optimization mod that installs Myth Stealer 3.2-FIX, a Java stealer and remote-access tool.
The sample posed as Lithium Extras 0.15.0+mc1.21.1 by “soder,” riding on CaffeineMC’s real Lithium project.
Most of the JAR acts like a working mod; one hidden module then downloads a second-stage file from Dropbox and writes it to `%APPDATA%MicrosoftWindowsjavaw.exe`.
That payload can steal browser passwords, cookies, and payment data, plus grab screenshots, clipboard text, and webcam frames.
There is no public victim count for this drop, so treat it as a confirmed sample, not a measured outbreak.
Get Lithium only from the official project — not random “extras” JAR!
|
|
last 10 comments: All comments
|
|
)
Add your comment (free registration required)