MCBYT – The Minecraft Hacker That KILLED Hypixel

Minecraft multiplayer is no stranger to cyber attacks and over the years the attack account just rises higher and higher the most recent was back in june of 2021 as hypixel along with many of the largest minecraft servers suffered some of the most wide scale ddosing we’ve seen in gaming history after

Several days the attacks had finally slowed to a stop as the talking bear the supposed attacker seemed to have lost interest however that wasn’t quite the end of it two days ago just shy of a year after the ddosing hypixel fell victim to another attack this time not

Just forcing the server down again and again but fully shutting down the server and the website for several hours as for the attacker they seem to be one and the same in today’s episode of minecraft uncovered we’ll be taking a look at the hack that took down hypixel

I think a quick recap is in order 2021 june 15th hypixel at the peak of its popularity suddenly begins to slow now that’s nothing new with over 000 players on at the highest there isn’t much they can do when the stress is simply too high nobody paid it much

Mind until that is the server crashed throughout the next few days the server would be held offline on and off as tens of other large servers joined its fate including mineplex mccentral 2b2t wincraft goma hd and many more after days of theorizing on the cause and the attacker they were finally revealed

Through a twitter account tagged the talking bear at the time just based on how open they were about the attacks their behavior being that of a child and their supposed hacking tools looking like something out of the ms-dos days people weren’t entirely convinced that the anonymous user was behind the

Attacks and theories still ran rampant until the attacks finally ended by the next week and since then radio silence no updates from the victimized networks no gloating from the supposed attackers nothing at all until now on tuesday may 3rd the hypixel network was taken down for nearly a full day by someone who

Claimed to be the one and only talking bear from about the midnight between the second and third to noon on the third at least according to north american time zones where hypixel is hosted an attacker had gained access to some of the administrative tools of the hypixel

Network ones that seem to be related to the domain once they were in they attempted to scam the players of hypixel redirected them to their own server took down the api overwrote the website and more by the end of that day the hypixel community had devolved into chaos with

Thousands of players concerned and even panicked at the thought that their ip account details or something else private had been leaked to an attacker with less than altruistic intentions today players have for the most part to calm down but the story of this year’s hypixel hack is to most a mess how did

It happen who did it and why did they want to bring hypixel down let’s start from the top how did it happen we’ve gone through a quick recap of the events but there’s more to the story that you might not know about so we’ll begin from the very

Start at 4 28 am utc or about midnight of the day before in eastern time a discord user by the name of jacob 773 noted that the forms were broken not down no something much worse hijacked instead of being taken to the classic hypixel websites we all know and love this is

What he saw hightail was shutting down with links to donating cryptocurrency to their cause and later a picture of some guy holding six smartphones presumably trying to flex but immediately failing because he flipped off a camera wearing gym shorts and sucks with sandals and a mcdonald’s which is the new humiliating

Yourself any percent speedrun world record not to mention the fact that he totally dropped to one of the phones after that picture it’s already escaping his hand in the shot basically the most b-tech version of the twitter hack i’ve ever seen and according to the blockchain bro barely made twenty

Dollars pocket money chump change i got five times that yesterday for setting up a computer to play alden ring at the same time though he put up another page so.html with some much simpler text on it the talking bear two simon or hypixel zero the talking bear

Was back apparently they also tried to plug at xoxo xo on something the twitter is suspended in the instagram is empty so telegram maybe who knows and oddly enough that wasn’t even it for the websites wait long enough on the hacked pages and it would eventually redirect

You to a few different youtube music videos depending on the time you visited the site the html page being a k-flock freestyle and the main site linking to a relatively small artist known as say drilly with a song funnily enough titled leave me alone of course while that was

Bad enough the websites weren’t the only piece of hypixel affected by the hack they took down the server too it changed probably 10 times over the course of this hack but the server went back and forth between online offline whitelisted and redirecting to the hacker’s own private server which was harmless in

Appearance though perhaps not in purpose and we’ll get to that later they also changed the server listing message again and again including several insults towards hypixel an apparent bed wars giveaway announcement another talking bear reference and very interestingly multiple plugs to the namemc account of 8 one of the rare one character accounts

That’s still around today sort of and again we’ll get to that in a bit the pictures changed along with it toggling between the face on the eight minecraft account the goofy mcdonald’s phone guy and someone holding a gun at the camera some typical minecraft pop pvp gang

Member persona that i really thought and hoped we left behind in like 2019 but i guess not outside of the api going down during all of this that was the extent of the attack on hypixel as for his method on actually doing it we can’t confirm anything but there are a few

Theories the most popular of which is dns poisoning for those that don’t know a dns is basically the internet’s phone book and it’s what turns hypixel.net into 1.2.3.4 or whatever is the actual ipa address behind it to poison it means going into whatever service handles their dns resolution in this case we’re pretty

Sure that’s cloudflare and redirecting hypixel.net to another ip ones that were responsible for hosting the hacked web pages in the fake server however i don’t actually believe that this dns poisoning is the case instead i think that the hacker managed to get one level higher and gained access to hypixel’s domain

Registrar account where they actually registered hypexo.net and all their other websites and had them set up the reason i think this is because if you do a who is check on the site which anyone can do for free and very easily it shows that the domain was just updated

Recently and the name servers seem to have been changed which basically means that they connected hypixel.net with some other cloudflare account to take over the network and there’s a lot more they could have done and didn’t or perhaps they were stopped just in time to prevent any more damage who knows on

Top of all that the registrar that hypixel apparently uses godaddy has actually had a login exploit since the middle of 2020 that’s gone unpatched for whatever reason and potentially was there into the network today the server is back to normal but that still leaves us with two very important questions who

Did this and why who seems like an easy answer the talking bear after all he had managed to hold the network down last year and they also you know said that’s who they were but this has a few problems first we have absolutely zero way to know this

Was actually the talking bear and not some other weirdos trying to use his name to throw people off their trail this could have been cucumber joe for all we know and he just didn’t want to take credit for the attack to get away with it easier the talking bear has been

Off twitter since he was suspended during the attacks in june of 2020 and he hasn’t come back on a new account so there’s no reason to take their word that the bear really was behind this on top of all that though there’s some sort of weird fixation with the eight account

And this can’t really be explained i do plan on fully covering the history of eight in the future and it’s been delayed for reasons that i can’t say here but what i can say is that to our knowledge nobody has access to the account it’s been locked or inaccessible

By mojang’s orders for years now so why promote the account well there’s a few reasons again this could just be to throw us off but it could also mean the attack was orchestrated by one of the previous owners of 8 before it was locked or better or worse yet depending

On how you look at it 8 might have potentially been recovered by somebody new even though from what we know that should be basically impossible we haven’t seen any activity suggesting that this is true not even on the name mc profile which shouldn’t be locked at

All so honestly i’m at loss here maybe he just likes the account and wants to raise awareness what a good guy but since the answer of who’s behind the attack might not be coming let’s focus on a question we may actually be able to answer why was the server taken over the

First and most obvious answer is clout and this one on some level is almost certainly true i mean these guys plugged xoxo xo the talking bear ate their terrible server and apparently their local high school football team or something based on those gym shorts okay i’m sorry but this fit is terrible like

Oh my god figure out how clothes work dude so yeah clout was involved almost certainly what we don’t know though is whether there were any other more sinister motives a lot of players are concerned right now that the hackers might have stolen their account info which let me confirm is impossible

Unless you literally typed it out and sent it to them or downloaded some malware which were about 99.9 percent sure they didn’t add anywhere but what they just might have is your ip when hypixel was redirected to the fake server anyone joining out of curiosity through direct connect or just without

Looking was giving that server their username and ip which could have potentially been saved into a database they’ll use for any number of things including ddosing and doxing what are the chances that they’ll do either of those things to you very low unless you’ve somehow slighted them in the past

However there is a possibility that they’ll release the list publicly since they do seem to thrive on chaos and that would be far from ideal there’s not really much we can do to stop them in this situation unfortunately but all i can say is there’s no reason to believe

That they will do that other than that they can and i’m sure that that would attract a lot more attention towards them which could potentially backfire when they take down hypixel hypixel gets mad when they release a database of thousands of players any number of them

Could go after the hackers and turn the gun on them which is a risk i hope they are not and doubt they are willing to take so where does that leave us for the most part unharmed the few unfortunate souls that join their impersonator server might have a slight risk of an ip

Address leak but otherwise you are safe hypixel on the other hand might have something more to worry about whether the hack involved sim swapping social engineering exploits or just reused passwords hypixel is going to have to step up their security to make sure this doesn’t happen again or could mean lost

Time money and respect behind the scenes for the largest server in minecraft history the coming weeks are going to be interesting thank you all for watching much appreciated hope you enjoyed this video was outlined scripted recorded voice over overlaid and edited all in one day

And a school day at that so yeah it’s definitely rushed but i wanted to get it out in time to take the place of the video i plan to release today which will come out next week it’s an absolute banger and i’m almost finished editing it and after that you’ll be seeing the

First episode of a possible new series so stay tuned otherwise not much to say but i will plug my twitch mcbyt live which i’ll be streaming on this summer and my discord with a link on screen and in the description and of course subscribe and like if you want use the

Bell if that even does anything i don’t know anymore that’s it thanks for the support and have yourselves a very good one peace You