Download our in-depth report: The Ultimate Guide to IT Security Vendors
"The Java applet, called 'Minecraft Hack Kit.jar,' tricks the user by offering aggressive in-game features, such as kicking or banning other users, or 'ForceOP,' which entails taking over as moderator on a game server," writes Intego's Lysa Myers.
"When run, however, the program will install three new applets along with a Launch Agent script that keeps them persistently running in the background," writes CNET News' Topher Kessler. "These secondary payload programs then attempt to steal Minecraft credentials and send them to various Hotmail accounts."
"The tool is also capable of updating and deleting its components (presumably after receiving remote commands), so additional malicious activities could be carried out down the road," writes Geek.com's Lee Mathews. "That could mean everything from more widespread password stealing to browser hijacking."