Poisoned Pipeline / Incidents / AS275
When Dungeons Arise shipped Fracturiser malware
Catalogued from the tstromberg supplychain-attack-data dataset
(community-curated incident corpus). Included because first-party
sources exist for it; see the links below — vendor advisories, project
incident reports, and researcher write-ups. Not based on aggregator
coverage.
Mapped techniques
- T0109 Publish malicious artifact
supply-chain campaign
Named in the tstromberg supplychain-attack-data corpus with first-party references.
Sources
- https://support.curseforge.com/en/support/solutions/articles/9000228509-june-2023-infected-mods-detection-tool-and-report
- https://www.bitdefender.com/en-au/blog/labs/infected-minecraft-mods-lead-to-multi-stage-multi-platform-infostealer-malware
- https://github.com/fractureiser-investigation/fractureiser
- https://arstechnica.com/information-technology/2023/06/dozens-of-popular-minecraft-mods-found-infected-with-fractureiser-malware/