WeedHack Malware Campaign Targets Minecraft Players via Fake Clients

• •WeedHack malware has infected over 116,464 Minecraft players.
• •Attackers have shifted to file-hosting services for malware distribution.
• •SEO poisoning tactics are placing malicious sites at the top of search results.

The WeedHack malware campaign continues to target Minecraft players, infecting over 116,464 users despite the takedown of its command-and-control infrastructure in July 2026. McAfee Labs reported blocking over 6,300 attempts to access malicious sites linked to WeedHack in the past month. Attackers are now utilizing file-hosting services like Discord and MediaFire to distribute the malware, which spreads through SEO poisoning and fake Minecraft client sites. Researchers identified multiple active malicious sites and noted that SEO tactics have placed these sites at the top of Google search results. Gamers are advised to download files only from trusted sources and to be cautious of offers for free or cracked software. The ongoing nature of this campaign suggests a significant threat to the gaming community.