Chaos ransomware targets gamers via fake Minecraft alt lists

LASER_oneXM

Level 37
Thread author
Verified
Top poster
Well-known
Feb 4, 2016
2,552
The Chaos Ransomware gang encrypts gamers' Windows devices through fake Minecraft alt lists promoted on gaming forums.
Minecraft is a massively popular sandbox video game currently played by over 140 million people, and according to Nintendo sales numbers, it's a top-seller title in Japan.


Masked as an 'alt list' text file​

According to researchers at FortiGuard, a recently discovered variant of the Chaos ransomware is being tentatively distributed in Japan, encrypting the files of Minecraft players and dropping ransom notes.
The lure used by the threat actors are 'alt list' text files that supposedly contain stolen Minecraft account credentials, but in reality, is Chaos ransomware executable.