nocturnalnerves went full time as a streamer only to have a hacked friend DM lead to total takeover across platforms. The July 7 post highlights how Minecraft themed scams continue exploiting trust in the community.
On July 7 nocturnalnerves posted an update no creator wants to make. A message from a friend account she trusted turned out to be a compromise. What looked like a casual Minecraft conversation led to a link that gave the attacker full access. Within hours she had lost control of her Discord, streaming profiles, and connected services.
The hacker tried blackmail and used her accounts to spread the same scam to her community. She spent days recovering what she could while going public to warn others. The timing hit especially hard: she had recently made streaming her full time job.
CurseForge Remains A Vector
Separate posts from the same week describe near misses with CurseForge links. One creator received a random DM pushing a Minecraft plugin that was actually an infostealer. Another user lost significant Roblox assets after a similar compromised CurseForge modpack profile, showing the cross platform risk.
These incidents echo a larger campaign tracked earlier in 2026. Malware disguised as free mods or clients has hit over 100000 systems by some counts, with new infections still reported daily. Attackers sell access to compromised machines for as little as five dollars a month.
- Only download mods from the original creators verified pages on Modrinth or official sites
- Never run CurseForge imports or executables sent via DM even from friends
- Use hardware 2FA where possible and separate gaming accounts from main email
- Check account activity immediately if a friend suddenly starts talking about Minecraft out of nowhere
Minecraft itself is not broken. The ecosystem around it is. Between compromised accounts, fake mods, and players eager to try the latest thing, there is constant fuel for these operations. Creators are high value targets because one breach can spread to thousands.
I usually catch these things but not this time. The hacker tried to blackmail me and I lost access to literally everything.
That line from the original post should be required reading. The community has seen these warnings before yet the scams keep working. Until players treat every unsolicited Minecraft link like a potential nuke, more creators and kids will keep getting cleaned out.
Other
