Over 116,000 Mincraft systems infected in WeedHack malware campaign
A large-scale malware campaign dubbed WeedHack has infected more than 116,000 Minecraft systems since January 2026, according to a report from BleepingComputer. The campaign targets players by distributing malicious mods, launchers, and other game-related files through unofficial websites and Discord servers. Once installed, the malware steals browser credentials, cryptocurrency wallets, and Discord tokens, allowing attackers to hijack accounts and spread the infection further. The malware also includes a keylogger and can download additional payloads. Researchers from Morphisec identified the campaign and noted that it primarily affects Windows systems. The attackers use a variety of techniques to evade detection, including code obfuscation and using legitimate services for command-and-control communication. Minecraft players are urged to only download mods and launchers from official sources like CurseForge or the Minecraft Marketplace, and to keep antivirus software updated. The scale of the infection highlights the risks of third-party game modifications.
Developers must vet third-party mods and educate users on safe downloads.