Fake Minecraft Mod Deploys Myth Stealer RAT to Steal Browser Credentials and Cookies

Cybersecuritynews •Tushar Subhra Dutta • September 7, 2026

A counterfeit Minecraft optimisation mod is installing Myth Stealer, malware that can steal browser passwords, cookies and data. Its malicious file looks useful because features work as advertised, giving players little reason to suspect a hidden threat. The campaign exploits users seeking performance improvements from unofficial add-ons. Once installed, the fake mod starts a multi-stage […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake Minecraft Mod Distributes Myth Stealer RAT for Credential Theft A counterfeit Minecraft optimization mod has been identified deploying Myth Stealer 3.2-FIX, a Remote Access Trojan (RAT) designed to steal passwords and browser credentials. The malicious file, disguised as Lithium Extras 0.15.0+mc1.21.1, exploits users seeking performance enhancements from unofficial mods. Victims unknowingly install the trojanized mod, which then executes a multi-stage attack to harvest sensitive information. The malware is capable of remote control, surveillance, and harassment of victims. This campaign primarily targets Minecraft players, raising concerns about the security of unofficial game modifications. The current status indicates ongoing exploitation as users continue to download the malicious mod. No specific numbers or CVEs are mentioned in the articles. 2 sources 59

Extracted Entities

Fake Minecraft Mod Deploys Myth Stealer RAT to Steal Browser Credentials and Cookies

The full story

Extracted Entities

Attack Types (1)

Malware (1)

MITRE ATT&CK (1)