Weedhack Malware Campaign Infects 116,000 Mod-Hungry Minecraft Players Systems Through SEO Poisoning and YouTube
McAfee said the malware-as-a-service operation used YouTube and search poisoning to steal credentials, with a premium tier adding remote access for $5 a month.
- McAfee Labs researchers reported that the "Minecraft-focused Malware-as-a-service" campaign WeedHack has infected 116,464 systems since January, spreading primarily via YouTube videos and search engine optimization poisoning.
- Operating as a clear-net service, WeedHack relies on social engineering to trick victims into downloading malicious files disguised as gameplay enhancements, which disable Windows Defender and collect system information.
- The free version steals credentials from 36 browsers and 56 cryptocurrency add-ons, while a $4.99 monthly paid tier enables webcam access and keylogging for custom payloads targeting game versions 1.21.0 to 1.21.11.
- Beyond financial theft, the campaign utilizes stolen private information for harassment and public humiliation, with researchers reporting that victims have been blackmailed by cybercriminals weaponizing digital identities.
- Gaming communities function like social networks and face identical risks, prompting experts to advise players to avoid downloading mods from unofficial Discord servers and enable multi-factor authentication.
12 Articles
12 Articles
Teens are using $5 WeedHack malware to target Minecraft players
Minecraft is one of the most popular games on the planet. So, of course, that makes Minecraft players a prime target for hackers.In a new cybersecurity report, researchers from McAfee Labs describe new malware that has already logged more than 116,000 hits. When the report was published on June 2, McAfee Labs found that the campaign logs between 2,000 and 3,000 malicious hits every day. Dubbed WeedHack, the malware is being offered as a malware-…
Malware campaign targeting Minecraft users infects over 116,000 systems
A Malware-as-a-Service (MaaS) operation named WeedHack is targeting Minecraft users and allows threat actors to gain remote access to victims’ screens, webcams, and files through a web-based dashboard, McAfee researchers found. Minecraft, developed by Mojang Studios and released in 2011, is one of the best-selling video games of all time, with more than 350 million copies sold worldwide. Since January 2026, the campaign has infected more than 11…
Hackers Use YouTube and SEO Poisoning to Spread WeedHack Minecraft Malware
Hackers are hiding dangerous malware inside what look like popular Minecraft mods and game clients, using YouTube videos and search engine tricks to pull unsuspecting players into their trap. The campaign, known as WeedHack, has been quietly running since January 2026 and has already racked up over 116,000 victims worldwide. What makes this campaign particularly alarming is how it packages itself as a legitimate service. WeedHack operates as a M…
Coverage Details
Bias Distribution
- 75% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
