{
  "name": "Minecraft: Dark Tale of Scams, Malware & Extortion",
  "slug": "minecraft-dark-tale-of-scams-malware-extortion",
  "description": "The article exposes a sophisticated scam targeting Minecraft players through fake 'grief-free' server communities. The SugarSMP website, promising a safe gaming experience, was found to distribute malware-infected mod packs. The malware, named Spark stealer, steals sensitive data including Discord tokens, browser credentials, and crypto wallet information. The threat actors employ social engineering tactics to maintain their fake community's reputation and remove warnings about their activities. Multiple similar websites were discovered, all hosting various types of malware. The scam's persistence mechanisms and social engineering techniques are detailed, along with remediation steps for affected users.",
  "published": "2026-03-18T09:42:02+00:00",
  "created_at": "2026-03-18T09:42:02+00:00",
  "modified_at": "2026-03-18T10:22:11+00:00",
  "created_at_opencti": "2026-03-18T09:42:02+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2026-03-18",
    "data theft",
    "discord",
    "malware",
    "minecraft",
    "mod packs",
    "scam",
    "social engineering",
    "spark stealer",
    "stealer",
    "sugarsmp"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "69cfd3024bb89fc2f7fdeb87c77b35bf8216e31c2146161f0b3dfaec25da771f"
      },
      {
        "id": "",
        "name": "6961710721e74d9b3f28dd595b01abc7ee71f0d8339b4cf95679435601302ae6"
      },
      {
        "id": "",
        "name": "a3e88f95484965f7c9a34731ffca42fcaea25e917f5a6d70ab86c941cf23b832"
      },
      {
        "id": "",
        "name": "060ed0ec27a0a4ad7b55425ed56d8ef0c55aa61b499d4884d1679f18d518ddf3"
      },
      {
        "id": "",
        "name": "c08c9be47baddbb62f69b70932221d89f8a9984c778b762212676c470ba329cb"
      },
      {
        "id": "",
        "name": "7e7c533bd42d386d95e6bd299efc1ad3ef5ea58e69c08bdd2d02fc97e89e0e53"
      },
      {
        "id": "",
        "name": "16ca5165e297c6c20003186943571394173249f10e376f4d1c085304f5cca087"
      },
      {
        "id": "",
        "name": "19645fc596fd49196581f751f9217030d5bec9eb10d1d836668407e0304730aa"
      },
      {
        "id": "",
        "name": "e4598c17b948526ccc3f586857363a75c95e695a5125d5b4fed088b27a58100e"
      },
      {
        "id": "",
        "name": "f8002a0a621bf26d562c8cca86acb490084648379a8f9340f3329eeaa9124685"
      },
      {
        "id": "",
        "name": "225f57aba3250d648e7bc4ad51b533552a3a0e0425817d02b1d3b668fddf78bc"
      },
      {
        "id": "",
        "name": "85872d267e1125e8bba0c460a8a7416d0845e9794a49a90a0dde8c9401f07a03"
      },
      {
        "id": "",
        "name": "495d1d500afc5ec700a0a15bf34862973e8e0152f9346b322a468cbe6e7c9d1e"
      },
      {
        "id": "",
        "name": "f45a28e7a6d64bfb4e74d6ffed115e79afb005d5c33dfcd1045b068c03b0e480"
      },
      {
        "id": "",
        "name": "52601d295b5468aa9e2db1802fe55dab437128584df4f20e9bac164ac4ec8ec3"
      },
      {
        "id": "",
        "name": "1a6bceaf9e4efe70144984dc76be7c9d0ffcfaaeb76325a4394f6eb14e3a5135"
      },
      {
        "id": "",
        "name": "997f7449d7b98aa08ad37c7953a51ad3f95e7532824959b7eba3953b30e76475"
      },
      {
        "id": "",
        "name": "5b573de08c6980957556c94666e81544cdb0d084e9e880cb32c937a851274930"
      },
      {
        "id": "",
        "name": "dfef4a07800ad08e09390291647e4cf50c77d1a83e076c181103f25a77dd5697"
      },
      {
        "id": "",
        "name": "38c55481911e7f789fc68628c7b9d9a2f8139524ac2deffe85ffe3ac9dce8178"
      },
      {
        "id": "",
        "name": "2a4ee7edcd12ea727af4eec78ae4e15620678cb9a53b53630acb7144097efb11"
      },
      {
        "id": "",
        "name": "b59ded7da641637ec3a95fe78b8b1c69d7a85bb9a70351e80f26b334fe452699"
      },
      {
        "id": "",
        "name": "4c52f12b45f5c0afb3684647222419332c1627ea95af03553fdd9e3a509d272b"
      },
      {
        "id": "",
        "name": "d6832ecc0d04a0621fbe1ed19311577f6a750bfb68460809bc9dfa571c222206"
      },
      {
        "id": "",
        "name": "7115dcd7a17c6d5f4e01d72a7056a6f7e9a9ea7556b6f8fce02be0b97f632ddf"
      },
      {
        "id": "",
        "name": "c4fc36d968c0c190716ecefac4f8fdea92de88fd94080108ef85a96512eb6471"
      },
      {
        "id": "",
        "name": "74064d191ab454bbf75e899e4097332d4a8897b13c448db02022c662135e8405"
      },
      {
        "id": "",
        "name": "53e059cab287674515454b51f4dda281d0812a51fff2c9c7f9b077d3a475600a"
      },
      {
        "id": "",
        "name": "67e3dbde303c8fc70020ee94c0036a1499f34d029655f6f1d156fbe002125470"
      },
      {
        "id": "",
        "name": "85892a04d28e1962511c2aa4ffd5e9ef3e34e4280a2022427d617d884fa1e774"
      },
      {
        "id": "",
        "name": "d9ad0330531ddf455438714192de9b3c7755d50acf939cb4de97ba6fb39fb1ae"
      },
      {
        "id": "",
        "name": "7ec97405aeb271c73a7bbb9d466f755c18921f16403dab581e79d1096aadfd03"
      },
      {
        "id": "",
        "name": "7365bb5c74edcbf71977b31280d69aed7e6a49c8a80ab8076fef84f138df98e4"
      },
      {
        "id": "",
        "name": "fa2a590dfdbc9170be58764f8da6a27a81d551b00a21061a9dc03bfab78f9e63"
      },
      {
        "id": "",
        "name": "ca48b83c93875285dd66ba33e11a5483b193d605da924b126e96cf4034c28e67"
      },
      {
        "id": "",
        "name": "62528f64a6515df67129ca7bea4cca43b01146d2d166cc3b0bd890f27efc38ea"
      },
      {
        "id": "",
        "name": "0221d06009b9848a3e1be34405fef1d586b84d115f10109de8f9c2e4806b6f40"
      },
      {
        "id": "",
        "name": "5620216dc128a3d9292defee29b7f295c33eda97e5be9a0eede777d9d70efae5"
      },
      {
        "id": "",
        "name": "e340d345dfd492393971c8602fd4863583247fa46cd834fe5e87258d18fc2eac"
      },
      {
        "id": "",
        "name": "2c5fb4e1b75c2a26e9e186069d61e8204c7dc8752d3b9b95087b19b1020df691"
      },
      {
        "id": "",
        "name": "6e843f82431acbcb35dffcb1a5ae40ef4c1127e9ae6f2e5f738e7355d3a89ceb"
      },
      {
        "id": "",
        "name": "7b9b75d7febf015003ac167e122b0cdfc561883b725252d593a85a42eba4b6bc"
      },
      {
        "id": "",
        "name": "424a1ab33890d6c6448dfc25507ac17d48e7d406caf287c62082225ef1c5358d"
      },
      {
        "id": "",
        "name": "8c2c4ff54b48631d324b643a333ae08161a091f439cfcb684cdf2157a42c9912"
      },
      {
        "id": "",
        "name": "deef632b35470738485067d3c757d1fdb7e45393b59010ce170e69c23b3a092d"
      },
      {
        "id": "",
        "name": "54f00324f7070a9a7308fdea9eaaa58e96e96273608a75db5bacdd410f50f0c0"
      },
      {
        "id": "",
        "name": "90b6a76843e74362c92ef691a0d078a5cc0cdc2a396ecf1b63eae7291215faff"
      },
      {
        "id": "",
        "name": "28a03d29e99c75fc9603b9e5193f97feca561bdc6db4271cdb2d522b9d5b2ae3"
      },
      {
        "id": "",
        "name": "06e12e4393c9554c81bd087446e32890a45fc77ab6f048e0dd0db1d4cc010f1f"
      },
      {
        "id": "",
        "name": "8e79a1a6e6df1f622fbbd2bde9fe19f93340da2bd1be6d70b91fd62dce5e74e0"
      },
      {
        "id": "",
        "name": "7f239306e6e32246a07818b3600932c1ad85a42e9902370d98d9fc0f1b120ec7"
      }
    ],
    "malware": [
      {
        "id": "legacy:malware:eea586603c344ee0",
        "name": "Spark stealer",
        "slug": "spark-stealer"
      }
    ],
    "attack_patterns": [
      {
        "id": "7e696094-0814-4f0c-9a86-b76e56821463",
        "name": "T1542.003"
      },
      {
        "id": "b7ba0db0-7d4f-436f-8d5f-c431d690b048",
        "name": "T1555.003"
      },
      {
        "id": "9322d33b-00c1-4f99-9f1a-a33d93c0dac2",
        "name": "T1059.007"
      },
      {
        "id": "667462db-9031-48eb-893a-05d35f9330a7",
        "name": "T1056.001"
      },
      {
        "id": "a72b6e11-a5d5-4f5a-8f0d-8861e90c34f7",
        "name": "T1555"
      },
      {
        "id": "e615d5ec-8d67-4048-b21d-a5fb09925bb9",
        "name": "T1552.001"
      },
      {
        "id": "d4ebbe9f-66c4-4806-b26c-4a0811962f9c",
        "name": "T1553.006"
      },
      {
        "id": "40f0d8e3-bcd7-4b97-a958-f55815698fc5",
        "name": "T1053.005"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "c12e0e03-aab0-4646-a929-e921a3d27f02",
        "name": "T1219"
      },
      {
        "id": "5999052b-e9ae-49e8-9235-d9bf975c22af",
        "name": "T1547.001"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "kittysmp.net"
      },
      {
        "id": "",
        "name": "pinkcraftmc.com"
      },
      {
        "id": "",
        "name": "kittenmc.com"
      },
      {
        "id": "",
        "name": "bunnycraft.online"
      },
      {
        "id": "",
        "name": "kittlycraft.com"
      },
      {
        "id": "",
        "name": "ponyrise.com"
      },
      {
        "id": "",
        "name": "cutiecraft.network"
      },
      {
        "id": "",
        "name": "greatsmp.com"
      },
      {
        "id": "",
        "name": "hellopink.net"
      },
      {
        "id": "",
        "name": "playsweetcraft.site"
      },
      {
        "id": "",
        "name": "hellokittycraft.net"
      },
      {
        "id": "",
        "name": "kuromicraft.online"
      },
      {
        "id": "",
        "name": "cutiemc.com"
      },
      {
        "id": "",
        "name": "playpinkycraft.com"
      },
      {
        "id": "",
        "name": "owocraft.com"
      },
      {
        "id": "",
        "name": "softiecraft.com"
      },
      {
        "id": "",
        "name": "cuttiescraft.com"
      },
      {
        "id": "",
        "name": "kittenclient.com"
      },
      {
        "id": "",
        "name": "minicraft.world"
      },
      {
        "id": "",
        "name": "sweetcraft.net"
      },
      {
        "id": "",
        "name": "ragnacook.site"
      },
      {
        "id": "",
        "name": "pinkiecraft.com"
      },
      {
        "id": "",
        "name": "neekocraft.com"
      },
      {
        "id": "",
        "name": "kittycraft.online"
      },
      {
        "id": "",
        "name": "cuttiesmp.com"
      },
      {
        "id": "",
        "name": "kitlycraft.net"
      },
      {
        "id": "",
        "name": "uwucraft.net"
      },
      {
        "id": "",
        "name": "cherriecraft.com"
      },
      {
        "id": "",
        "name": "kittiemc.com"
      },
      {
        "id": "",
        "name": "sanriomc.online"
      },
      {
        "id": "",
        "name": "kittycraft.site"
      },
      {
        "id": "",
        "name": "kittlycraft.net"
      },
      {
        "id": "",
        "name": "kitseramc.com"
      },
      {
        "id": "",
        "name": "kittiysmc.com"
      },
      {
        "id": "",
        "name": "kittypinkiecraft.com"
      },
      {
        "id": "",
        "name": "kittypixel.com"
      },
      {
        "id": "",
        "name": "sanriocraft.online"
      },
      {
        "id": "",
        "name": "kittycraft.com"
      },
      {
        "id": "",
        "name": "sugarsmp.com"
      },
      {
        "id": "",
        "name": "cutiesmc.com"
      },
      {
        "id": "",
        "name": "kittieslandmc.com"
      },
      {
        "id": "",
        "name": "kittensmc.com"
      },
      {
        "id": "",
        "name": "hellocraft.online"
      },
      {
        "id": "",
        "name": "kittyscrafts.com"
      },
      {
        "id": "",
        "name": "mysticraftsmp.fun"
      },
      {
        "id": "",
        "name": "sanriomc.com"
      },
      {
        "id": "",
        "name": "kitten-smp.com"
      },
      {
        "id": "",
        "name": "lanchemc.com"
      },
      {
        "id": "",
        "name": "sweetiecraft.net"
      },
      {
        "id": "",
        "name": "kitllycraft.net"
      },
      {
        "id": "",
        "name": "hellokittymc.online"
      }
    ]
  },
  "external_refs": [
    "https://blog.gdatasoftware.com/2026/03/38390-minecraft-mod-sugarsmp-malware",
    "https://otx.alienvault.com/pulse/69ba817a667265c550e1ce4a"
  ]
}