logo

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

ID: fcb88e55-94b4-5aad-8d24-bd30fbb7bba5

STIX ID: report--fcb88e55-94b4-5aad-8d24-bd30fbb7bba5

Feed Name: The Hacker News

Threat Score
70/100

Date Published: 2026-08-24

Date Updated: 2026-08-25

Author: [email protected] (The Hacker News)

...
...

Cybersecurity researchers (McAfee Labs) found active SEO-poisoning campaigns distributing the Weedhack malware by impersonating Minecraft clients and outranking legitimate sources; the multi-stage JAR payload can collect system information, create Defender exclusions, and exfiltrate data, with distribution through spoofed websites, Discord, file hosts, GitHub, and other community platforms (McAfee blocked >6,300 attempts).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.