THIS NEW MINECRAFT EXPLOIT COULD RUIN YOUR COMPUTER! HERES WHY AND HOW TO FIX IT! #LOG4J

If your pc is of importance to you then please, watch this video until the end minecraft is facing a serious threat. And although it is the first, it is likely not the last app to be affected.

A vulnerability in log 4j, an open source logging utility used in many apps, including ones used by large enterprises and several large websites, has been exploited through the form of a new released piece of exploit code.

The story first broke on sites where minecraft users congregate.

These sites warned that hackers could execute ill intentioned, malicious code on servers or clients running the java version of minecraft by manipulating message logs, including things typed in chat messages.

It got even worse when logged 4j was identified to be the source of the vulnerability, as so many places are using this logging utility guys.

If this sounds complicated, i get it, but please do take this seriously as there are likely lots of other games, apps and websites to be affected in the future, and your machine is at risk.

The log 4j utility is so popular that it’s also used in tons of popular frameworks, meaning that a mind boggling amount of third party apps may be vulnerable to exploits as well one of the few early sources providing a tracker number for this vulnerability was Github security, firm cyberkendra on late thursday also reported a log 4j rce zero day being dropped on the internet and concurred that there are many popular systems on the market that are currently affected.

Framework giant.

The apache foundation has yet to disclose any vulnerabilities on their end and security.

Firm lunatec stated that java versions greater than 6u 211 7u201 au191 and 11 0 1 aren’t affected by this attack and, even more importantly, that cloud services from steam and apple icloud have also been affected. The firm also said that in november, the alibaba cloud security team behind the popular e store aliexpress disclosed a vulnerability in log 4j2, the successor of log4j, that stemmed from recursive analysis functions which could be exploited through malicious requests that triggered remote code execution.

It also firmly urged people to use the latest version of lord 4j2.

So what does this mean for minecraft? The spigot forum said that minecraft versions – 1 8, 8 to the latest 1 18.

Release are all vulnerable popular game servers such as windcraft and hypixel also stated this, and they all urged minecraft players to take extra care.

The issue can allow remote access to your computer through the service you log into, and this means that any public server you go onto creates a risk of being hacked reproducing exploits for this vulnerability in minecraft.

Isn’t that easy, because success is reliant not only on the minecraft version running, but also the version of the java framework.

The minecraft app is running on top of it seems that older java versions have fewer built in security protections that make exploits easier.

Spigot and other sources have said that adding this jvm flag neutralizes the threat for most java versions and spigot, also as well as many other services, have already inserted the flag into the games.

They make available to users to add the flag, go to your launcher, open the installations.

Tab, select the installation in use and click these little three dots edit more options and paste this flag at the end of the jvm flags. You can also copy it from my description for the time guys, pay, close attention to this vulnerability and its potential to trigger attacks against all sorts of apps games and websites keep in mind.

Minecraft is the start, but likely not the end, steer clear of unknown servers or untrustworthy users and be safe that’s, where i’m, going to leave it for this video.

Let me know in the comments down below, if you already knew this or if you didn’t and what you’re thinking, and if you want to support my channel in making videos just like this one, then please leave a like subscribe and hit the Notification bell, so you don’t miss any future uploads and stay grizzly.

.

As found on YouTube