Security Alert CurseForge Mod Hack
Summary
(RFC) || Roblox Fighting Championship warns members about a hidden CurseForge mod hack that can screenshot, steal sessions, bypass 2FA and exfiltrate saved passwords. The announcement explains disconnecting from the internet immediately, resetting email and passwords from a safe device, and prioritizing email recovery to prevent account takeover and data loss.
Curseforge Hack is hidden in curseforge mod code. The modpack will still run but it's embedded into your system.
The hacker can view your screen live, only being able to screenshot. They try to gain blackmail on you.
If you don't disconnect from the internet in time, he will steal your "sessions". Basically hijacking your active logins acting as you currently logged in, able to bypass 2FA, location checks, and etc. Only way to clear these sessions is by disconnecting your internet on the infected PC and immediately go on a safe device to reset your passwords/sessions (log YOURSELF out on the main PC so they can't take over)
Passwords, cards, whatever that is saved in OperaGX, Edge, Browser cookies are sent to him. He sent me a list of logins back (Most were invalid, mainly my ex's shit got sold on the internet)
The crucial thing to RESET first are emails. Fuck everything else, it's recoverable as long as you have the email.
Again, don't do this on the infected PC. It will continually send him information as long as the PC is connected to the internet.
He was able to get into my discord and bypass 2FA/Backup Codes/Password. BUT, he couldn't get to my email in time because I disconnected from the internet and reset my password IN TIME. He WAS logged into my gmail but he only focused on deleting Discord notifications so I wouldn't notice. Bless me for having my phone notifications on. So, I may have been locked out of discord but Discord deactivated my account to prevent him from doing BS. He could only have access to my discord unless I verified the email/reset the password in which I don't have HIS 2FA for. I put him into a stalemate and discord support is goated because I had my original email.
