ESET discovers fake Minecraft mods on Google Play

Next story
Image of Minecraft apps

It wasn’t long ago that Minecraft was connected to a scareware campaign that preyed on users looking for Minecraft cheats. Today, ESET researchers report another misuse of this popular app: fake Minecraft mods on Google Play are pestering Android gamers with aggressive ads and scam activity. So far players have been exposed to 87 fake mods, and up to 990,000 users have installed them.

ESET researchers have divided malicious activity connected to fake mods for Minecraft into two main categories: ad-displaying downloaders, detected by ESET as Android/TrojanDownloader.Agent.JL and fake apps redirecting users to scam websites, detected by ESET as Android/FakeApp.FG.

For Android/TrojanDownloader.Agent.JL, ESET reports 14 fake apps impersonating Minecraft mods with up to 80,000 installs. Because these fake mods apps only display aggressive ads, poor reviews are very common.  

For the Android/FakeApp.FG, ESET has reported 73 instances using redirects to scam websites that reached up to 910,000 installs since being uploaded to Google Play between January and March 2017. Once launched, the apps display a screen with a download button. Clicking the button does not download any mods; instead, it redirects the user to a website opened in a browser and displays all kinds of obtrusive content.

The full analysis of fake mods for Minecraft on Google Play is now available on

In addition to only downloading apps from the official app store, it is also recommended that users use a mobile security product like ESET Mobile Security to help detect and flag malicious activity.  

About ESET

For 30 years, ESET® has been developing industry-leading IT security software and services for businesses and consumers worldwide. With solutions ranging from endpoint and mobile security, to encryption and two-factor authentication, ESET’s high-performing, easy-to-use products give consumers and businesses the peace of mind to enjoy the full potential of their technology. ESET unobtrusively protects and monitors 24/7, updating defenses in real-time to keep users safe and businesses running without interruption. Evolving threats require an evolving IT security company. Backed by R&D centers worldwide, ESET becomes the first IT security company to earn 100 Virus Bulletin VB100 awards, identifying every single “in-the-wild” malware without interruption since 2003. For more information visit or follow us on LinkedInFacebook and Twitter.


Anna Keeve

ESET North America