If you enjoy playing Minecraft, you may want to be cautious of the skins you use. Apparently Avast Threat Labs discovered there were user-created Minecraft skins with malware embedded in the PNG files. Some 50,000 user accounts might have been infected by the malware that tries to reformat hard drives, delete backups, and delete system files.
Fortunately the issue has been resolved, with non-image date being removed from PNGs when uploaded to Minecraft.net, but even then the code would not be run by Minecraft: Java Edition.
The PNG format allows for more information to be stored in the files than just image data, and that metadata is no being stripped from the files when they are uploaded. If a user did activate the code, there is a good chance antivirus software would have caught it and alerted you to it. If you are concerned you might have been infected, a full system scan is recommended to find and remove the malware.
Back to original news post