CurseForge PC game mod users may have received malware as part of a recent hack

(Image credit: Windows Central)

What you need to know

  • CurseForge is a popular modding platform for games like World of Warcraft, and Minecraft. 
  • Recently, the platform suffered a breach, where malicious actors baked malware into popular Minecraft mods.
  • CurseForge claims to have isolated the incident, and has released a malware detection tool to help those affected. 

For those of you using CurseForge for modding Minecraft, World of Warcraft, and other games, you may want to read this. 

CurseForge is a popular modding platform. The tool was previously independent, but then changed hands to Amazon's Twitch, but is now once again a separate entity, owned by modding tools purveyor OverWolf. CurseForge has long been my go-to tool for installing mods for World of Warcraft, and many thousands of players use the platform for modding other games, including Minecraft. However, those who have been using it for Minecraft recently may need to run a malware detector. 

Sadly, CurseForge was recently breached by malicious actors. The hackers baked malware directly into popular Minecraft mods, then used CurseForge to distribute the malware to unsuspecting users' machines. 

See more

CurseForge has issued its own tool to detect infections, although it's unclear how powerful this is at this time. CurseForge has urged users not to delete the CurseForge client, but to be safe, you may want to avoid updating or downloading new mods for the time being. 

See more

CurseForge is a very popular tool, so the scale of the malware distribution could be very dire. Minecraft players are often younger too, and having to deal with malware is stressful for anyone, let alone youngsters. Sadly this is an all-too-often occurrence with modding platforms, but it at least seems CurseForge is working to mitigate the damage. 

We have some guides on how to remove malware in Windows 10 and 11, and best anti-virus tools for Windows, but if these malware programs are newer, they may not show up in the latest definition updates until a little later. For now, I would avoid updating your Minecraft mods via CurseForge until they've given the all-clear. 

Jez Corden
Co-Managing Editor

Jez Corden is a Managing Editor at Windows Central, focusing primarily on all things Xbox and gaming. Jez is known for breaking exclusive news and analysis as relates to the Microsoft ecosystem while being powered by tea. Follow on Twitter @JezCorden and listen to his XB2 Podcast, all about, you guessed it, Xbox!