Weedhack malware campaign infects 116,000 mod-hungry Minecraft players
systems through SEO poisoning and YouTube

Date:
Wed, 03 Jun 2026 14:25:00 +0000

Description:
Fake mods and clients are being advertised on YouTube and used to deploy backdoors and infostealers.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Weedhack spreads via poisoned Minecraft mods on YouTube Malware disables defenses and enables remote access Offered as MaaS with free and paid tiers Cybercriminals are using YouTube to disseminate malware that targets Minecraft users and takes full control over their computers .

In January this year, security researchers McAfee Labs spotted a new
malicious campaign dubbed Weedhack. In the campaign, the malicious actors created countless YouTube channels and standalone websites, through which
they promoted links to Minecraft clients and mods. With the help of Weedhack (apparently an enterprise-grade dashboard that also allows crooks to inject the malware into legitimate Minecraft mods), they created poisoned mods and clients which delivered a .JAR file called DonutDupe.jar. Latest Videos From Watch full video here: Industry support This is a Java ARchive package format used in the Java ecosystem to bundle multiple files into a single archive. This file starts a chain reaction that results in Windows Defender being disabled, system information collected, and two additional payloads dropped, which establish persistence and enable remote access.

McAfee said the campaign accumulated a total of 116,464 hits, averaging approximately 2000 to 3,000 hits per day. Most of them are located in the US, with other notable mentions including Germany, India, the UK, Italy, Vietnam, Canada, Norway, Sweden, Finland, and Spain. You may like Likely created with AI-generated code: This massive vibe-coded campaign uses 1,700+ fake
filenames to inject malware into your favorite game mods and apps Steam Community Profiles abused as C2 network in new WordPress malware infection campaign Hackers exploit OpenClaw to spread malware via GitHub - and a little help from Bing

McAfee describes Weedhack as a Minecraft-focused Malware-as-a-service (MaaS). The custom payloads target versions 1.21.0 to 1.21.11 of the game, while the dashboard allows malicious actors to view stolen credentials and exfiltrated system information in a centralized manner. The MaaS is apparently being offered in Telegram channels in two tiers - free and paid, and while the free version comes with plenty of features (screenshot grabber, file exfiltrator), the paid one ($4.99 a month) offers webcam access, keylogging, and reverse shell execution.

One of the key features that makes Weedhack unique is that it is hosted on
the clear net and provides access to sophisticated malware for free," McAfees researchers explained. "This difference in cost and ease of access with detailed tutorials on how to use the malware significantly reduces the
barrier to entry for prospective customers. Furthermore, its ability to steal Minecraft accounts attracts a younger audience. Both of these factors complement each other and make the campaign much more lethal." Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Via The Hacker News The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/weedhack-malware-campaign-infects-116-0 00-mod-hungry-minecraft-players-systems-through-seo-poisoning-and-youtube


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)