A dangerous new scam is spreading across Discord, and it specifically targets Minecraft players. Cybercriminals are hijacking Discord accounts and using them to send convincing direct messages to friends, inviting them to join a Minecraft server. While the invitation may appear to come from someone you know, the download included with the message can contain a Remote Access Trojan (RAT).
Once installed, a RAT gives an attacker remote access to the victim’s computer. Depending on the malware involved, hackers can steal saved passwords, browser cookies, Discord tokens, personal files, cryptocurrency wallets, and other sensitive information. In many cases, compromised accounts are then used to spread the same scam to even more people.
How the Scam Works
Victims typically receive a direct message from a trusted friend asking if they want to play on a new Minecraft server. The message often includes a custom modpack or launcher that players must download before they can join.
Because the message comes from a legitimate Discord account, many users lower their guard and install the files without questioning them. However, once the software is executed, the malware silently infects the system and begins stealing data.
The attack doesn’t rely on exploiting Minecraft itself. Instead, it abuses the trust between friends on Discord.
Warning Signs
There are several red flags users should watch for:
- A friend suddenly asks you to test a Minecraft server out of the blue.
- The server requires you to download a custom modpack or launcher from an unfamiliar website.
- The download is provided through file-sharing services instead of trusted platforms.
- Your friend responds with generic or unusual messages that don’t match how they normally communicate.
If anything feels suspicious, contact your friend through another platform or ask them a question only they would know before downloading anything.
How to Protect Yourself
To reduce the risk of infection:
- Only download Minecraft mods and modpacks from trusted sources.
- Never run unknown launchers or executable files sent through Discord DMs.
- Keep Windows Defender or another reputable antivirus solution enabled and up to date.
- Enable two-factor authentication on your Discord account and email.
- Avoid reusing passwords across multiple services.
- If you believe you installed a malicious file, disconnect your PC from the internet, run a full antivirus scan, change your passwords from a clean device, and review your important accounts for suspicious activity.
Stay Vigilant
Scammers continue to evolve their tactics, and trusted friends remain one of the most effective ways to trick victims into downloading malware. If you receive an unexpected invitation to join a Minecraft server that requires a custom download, take a moment to verify that the message is genuine.
A few extra seconds of caution could prevent your Discord account, personal data, and other online accounts from falling into the wrong hands.
