logo

Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown

ID: bf0c18bc-8d1a-5061-905e-cc950d6e56f4

STIX ID: report--bf0c18bc-8d1a-5061-905e-cc950d6e56f4

Feed Name: Infosecurity Magazine (News)

Threat Score
70/100

Date Published: 2026-08-25

Date Updated: 2026-08-25

...
...

McAfee researchers report that the WeedHack malware-as-a-service campaign, which has infected over 116,000 Minecraft players via SEO-poisoned sites and fake clients, remained active after a July infrastructure takedown by shifting distribution to file-hosting and social platforms (notably Discord, MediaFire, GitHub, and Dropbox); researchers observed thousands of blocked access attempts and recommended downloading only from trusted sources, keeping security software enabled, and checking URLs for lookalike domains.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.