Minecraft servers targeted by a new cross-platform botnet

Microsoft warns of a new cross-platform botnet, named rash, targeting private Minecraft servers with DDoS attacks. The botnet uses a unique spread technique infecting both Linux and Windows systems. It was designed to attack Minecraft Java servers, possibly sold on darknet platforms. Most affected devices are in Russia but have also been seen in countries like Kazakhstan, Uzbekistan, Ukraine, Belarus, the Czech Republic, Italy, and India.

Microsoft warned users about a cross-platform botnet that targets private Minecraft servers with distributed denial-of-service (DDoS) attacks. The botnet, dubbed MCCrash, has a unique technique of spreading that allows it to infect Linux systems even though it originates in malicious software downloaded on Windows operating systems.

An analysis of the DDoS botnet identified functionalities designed to target private Minecraft Java servers using crafted packets, most likely as a service sold on darknet sites or forums.

A breakdown of the systems affected by the botnet over a period of three months showed that most of the devices were located in Russia, but they have also been recorded in countries such as Kazakhstan, Uzbekistan, Ukraine, Belarus, the Czech Republic, Italy, and India.