Hacked accounts pose as old friends begging you to install a CurseForge modpack for a surprise server. One Reddit report from this week shows the exact playbook now targeting mod users and it works because people still trust Discord DMs.
The latest scam making rounds is simple and effective. A Discord friend you have not talked to in months slides into your DMs with a story about needing you to download a Minecraft modpack. It is supposedly for a surprise server or a quick playtest. The link points to something that looks like CurseForge but delivers malware instead.
How the trap is set
- Hacked Discord account reaches out using an old mutual connection
- Story usually involves a friend building something cool that needs one specific modpack
- User is asked to install the pack which contains an infostealer
- Malware runs silently stealing browser data saved passwords and crypto wallets
The Reddit post from May 26 details one such conversation. The scammer used the classic playtest angle adapted to Minecraft claiming it was for a buddy. The community response confirms this is not isolated with users noting infostealers have become the default tool for Discord based attacks.
Yeah infostealers are the bread and butter nowadays for bad actors especially on discord
This hits the multiplayer and modded scene hardest. Players constantly share packs test betas and join new servers. That trust is now a liability. The post itself includes a screenshot of the exact DM exchange showing how casual and believable the request sounds until you realize the account was already compromised.
What actually matters here
Server owners and mod creators cannot patch human gullibility. The only real defense is treating every unsolicited download request as hostile. Verify through other channels. Never run files from Discord links no matter how innocent the story. The scam has already moved from generic games to Minecraft specific modpacks which means it will keep evolving.
If you run a popular modded server or SMP consider reminding your members. One compromised player can lead to wider breaches especially when accounts get reused for further social engineering. The evidence is clear these attacks are scaling and the Minecraft community is now squarely in the crosshairs.
