Fake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown

McAfee’s follow-up on the WeedHack Malware-as-a-Service campaign shows that even after its C2 infrastructure was disrupted the operation continues to spread an infostealer through convincing fake Minecraft client sites, SEO poisoning, Discord channels and file-hosting links; the malware has logged over 116,000 infections, steals browser credentials and crypto wallet data, and uses techniques like EtherHiding to maintain resilience.