Coleman is a real brand!? I legitimately had no idea 😂

I loved FFXV, the only advertisement I outright noticed was Cup Noodles, but that was a SUPER egregious one!

Technically the domain of this instance didn’t change. This instance was setup from scratch, under compuverse.uk.

However, a different instance did run under the same domain for a brief period of time, which was removed, and completely replaced by a brand new fresh instance.

👋 I’m Cameron, the Admin of the instance in question.

It’s a very odd situation, I’m entirely new to this whole Fediverse thing myself, but, trying my best!

I noticed in my log, literally just after @TopHat@compuverse.uk posted their comment, this popped up:

I’m unsure as to exactly what this is referring to, as the comment was made from my instance, but it appears the instance believes it came from elsewhere?

It’s very odd and I can’t really explain it I’m afraid.

https://compuverse.uk/c/gamedeals There is now ;)

Most of the mods that were infected were projects specifically designed to host the malware. From what I’ve read, only one legitimate user’s projects were affected, and like yourself, I’d never heard of the mods personally.

So, this is a dangerous bit of malware for sure, with the potential to spread quite badly, but so far I believe it’s had quite a limited reach due to not actually infecting anything super popular.

This situation is potentially a little overblown.

A very specific subset of mods were problematic.

The real worry is that the malware can automatically spread itself into all the other .jar files on your device!

CurseForge have a disinfection guide here: https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool/

So I highly recommend you give that a check through if you’ve downloaded anything from CurseForge recently.