Back Ground.News

Minecraft Malware Campaign Reportedly Infected over 116,000 Players

Ground.News • June 3, 2026

Researchers say a malware campaign disguised as Minecraft mods and cheats infected over 116,000 devices through Discord servers and gaming communities.

A large-scale malware campaign dubbed WeedHack is targeting Minecraft players and has infected more than 116,000 systems since January.

Cybersecurity researchers have flagged a new campaign targeting Minecraft players via YouTube to spread malware capable of gaining control of victims' systems. The Minecraft-focused malware-as-a-service (MaaS) campaign has been codenamed Weedhack by McAfee Labs, stating the activity has been active since January 2026 and impersonates Minecraft clients and mods to infect users. In all, 3820

Hackers are increasingly abusing trusted platforms like YouTube and engines to distribute malware, and a newly uncovered campaign targeting Minecraft players highlights how effective this tactic has become. Minecraft, originally released in 2011 by Mojang Studios, remains the best-selling video game globally with more than 350 million copies sold. Its open ecosystem, which supports […] The post Hackers Spread WeedHack Malware via YouTube …

To view factuality data please Upgrade to Premium

To view ownership data please Upgrade to Vantage

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WeedHack Malware Campaign Infects Over 116,000 Minecraft Players The WeedHack malware campaign has reportedly infected over 116,000 Minecraft players since January 2026. This malware is distributed through fake mods, cheats, and utilities primarily via YouTube and SEO poisoning. The operation, described as malware-as-a-service (MaaS), allows users to access a dashboard displaying stolen credentials and data from compromised systems. Most victims are located in the United States, Germany, India, and the UK. The malware targets sensitive information, including Minecraft session IDs, browser cookies, and saved passwords. It has evolved to include remote access capabilities, allowing attackers to control infected systems. The campaign is particularly concerning due to its low cost of entry for potential attackers, attracting many young individuals. McAfee researchers have identified over 240 distribution URLs and 3,820 unique malicious JAR files associated with the campaign. 20 sources 70

Extracted Entities

Minecraft Malware Campaign Reportedly Infected over 116,000 Players

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Malware (1)

Platforms (1)