FREE Vulcan Anti-Cheat | Advanced Cheat Detection | 1.8-26.1.2 | Folia Supported! 2.9.7.23

What a little nice malware :)

I think you left some info you were supposed to remove, so let's make it public, shall we?


This malware is being spread by this Github user: https://github.com/allamititok123/AxMinecart on his github you can find the "blacklist.txt" and "notme-1.0.jar" file.
Here are some links the malware is trying to reach:

CONFIG_PRIMARY
= https://t.me/autoupdatesforplugins

CONFIG_MIRROR
= https://github.com/allamititok123/AxMinecart/raw/refs/heads/main/notme-1.0.jar

CONFIG_FALLBACK
= https://raw.githubusercontent.com/allamititok123/AxMinecart/refs/heads/main/blacklist.txt

There's also some IP address for some server, I guess it's for their socket server which is used to control infected devices. IP: 134.255.233.188

Think before downloading random stuff from the internet..

decompiled this cracked jar, contains a payload.zip that tries to execute java code from a Telegram message. do not download plugins from this user they are filled with malicious scripts