Hackers Use YouTube and SEO Poisoning to Spread WeedHack Minecraft Malware

Cybersecuritynews •Tushar Subhra Dutta • June 3, 2026

Hackers are hiding dangerous malware inside what look like popular Minecraft mods and game clients, using YouTube videos and engine tricks to pull unsuspecting players into their trap. The campaign, known as WeedHack, has been quietly running since January 2026 and has already racked up over 116,000 victims worldwide. What makes this campaign particularly […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WeedHack Malware Campaign Infects Over 116,000 Minecraft Players The WeedHack malware campaign has reportedly infected over 116,000 Minecraft players since January 2026. This malware is distributed through fake mods, cheats, and utilities primarily via YouTube and SEO poisoning. The operation, described as malware-as-a-service (MaaS), allows users to access a dashboard displaying stolen credentials and data from compromised systems. Most victims are located in the United States, Germany, India, and the UK. The malware targets sensitive information, including Minecraft session IDs, browser cookies, and saved passwords. It has evolved to include remote access capabilities, allowing attackers to control infected systems. The campaign is particularly concerning due to its low cost of entry for potential attackers, attracting many young individuals. McAfee researchers have identified over 240 distribution URLs and 3,820 unique malicious JAR files associated with the campaign. 20 sources 70

Hackers Use YouTube and SEO Poisoning to Spread WeedHack Minecraft Malware

The full story

Extracted Entities

Attack Types (1)

Malware (1)