Fake Minecraft Mod Drops Myth Stealer RAT to Steal Passwords and Remotely Control PCs

Gbhackers •Mayura Kathir • September 7, 2026

A trojanized Minecraft optimization mod posing as a companion to the legitimate Lithium project has been used to deploy Myth Stealer 3.2-FIX, a password-stealing malware family with remote-access, surveillance, persistence, and victim-harassment capabilities. The malicious archive, tracked as MythStealer.jar_, masquerades as Lithium Extras 0.15.0+mc1.21.1 by “soder.” It abuses the reputation of CaffeineMC’s legitimate Lithium performance […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fake Minecraft Mod Distributes Myth Stealer RAT for Credential Theft A counterfeit Minecraft optimization mod has been identified deploying Myth Stealer 3.2-FIX, a Remote Access Trojan (RAT) designed to steal passwords and browser credentials. The malicious file, disguised as Lithium Extras 0.15.0+mc1.21.1, exploits users seeking performance enhancements from unofficial mods. Victims unknowingly install the trojanized mod, which then executes a multi-stage attack to harvest sensitive information. The malware is capable of remote control, surveillance, and harassment of victims. This campaign primarily targets Minecraft players, raising concerns about the security of unofficial game modifications. The current status indicates ongoing exploitation as users continue to download the malicious mod. No specific numbers or CVEs are mentioned in the articles. 2 sources 59

Extracted Entities

Fake Minecraft Mod Drops Myth Stealer RAT to Steal Passwords and Remotely Control PCs

The full story

Extracted Entities

Attack Types (2)

Malware (1)

Platforms (1)