WeedHack Malware Campaign Infects Over 116,000 Minecraft Players

• •Over 116,000 Minecraft players infected by WeedHack malware since January 2026.
• •Malware spreads through fake mods and YouTube SEO poisoning, targeting sensitive user data.
• •WeedHack operates as malware-as-a-service, making it accessible to young cybercriminals.

The WeedHack malware campaign has reportedly infected over 116,000 Minecraft players since January 2026. This malware is distributed through fake mods, cheats, and utilities primarily via YouTube and SEO poisoning. The operation, described as malware-as-a-service (MaaS), allows users to access a dashboard displaying stolen credentials and data from compromised systems. Most victims are located in the United States, Germany, India, and the UK. The malware targets sensitive information, including Minecraft session IDs, browser cookies, and saved passwords. It has evolved to include remote access capabilities, allowing attackers to control infected systems. The campaign is particularly concerning due to its low cost of entry for potential attackers, attracting many young individuals. McAfee researchers have identified over 240 distribution URLs and 3,820 unique malicious JAR files associated with the campaign.