Back Scworld

WeedHack malware campaign targets over 116000 Minecraft players | brief

Scworld • June 3, 2026

Coverage from Bleeping Computer indicates that a large-scale malware campaign known as WeedHack has been actively targeting Minecraft players, infecting more than 116,000 systems since January.

The WeedHack malware is distributed through malicious Minecraft-related mods, clients, and utilities via YouTube and engine poisoning. This malware-as-a-service (MaaS) operation provides a dashboard for users to access stolen credentials and information from compromised systems. Cybersecurity firm McAfee reports that WeedHack has impacted 116,464 systems, with daily infections averaging between 2,000 and 3,000, primarily affecting players in the United States, Germany, India, and the UK.

The campaign utilizes over 240 distribution URLs and 3,820 unique malicious JAR files. The MaaS platform, hosted on the clear net, offers a free tier that steals Minecraft session IDs, browser cookies, saved passwords, and credentials from various applications. A premium tier, available for $5 per month or a $24.99 lifetime purchase, adds features like remote control, webcam access, and keylogging. Many users of the service appear to be teenagers or young adults using the tools for harassment.

Source: Bleeping Computer

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

WeedHack Malware Campaign Infects Over 116,000 Minecraft Players The WeedHack malware campaign has reportedly infected over 116,000 Minecraft players since January 2026. This malware is distributed through fake mods, cheats, and utilities primarily via YouTube and SEO poisoning. The operation, described as malware-as-a-service (MaaS), allows users to access a dashboard displaying stolen credentials and data from compromised systems. Most victims are located in the United States, Germany, India, and the UK. The malware targets sensitive information, including Minecraft session IDs, browser cookies, and saved passwords. It has evolved to include remote access capabilities, allowing attackers to control infected systems. The campaign is particularly concerning due to its low cost of entry for potential attackers, attracting many young individuals. McAfee researchers have identified over 240 distribution URLs and 3,820 unique malicious JAR files associated with the campaign. 20 sources 70

Extracted Entities

WeedHack malware campaign targets over 116000 Minecraft players | brief

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (3)

Malware (1)

MITRE ATT&CK (1)

Platforms (1)