Minecraft malware campaign infects 116,000+ users worldwide

A widespread malware campaign targeting players of the popular video game Minecraft has infected more than 116,000 systems globally, according to cybersecurity researchers. The operation, dubbed "WeedHack," uses malicious software disguised as game modifications, or mods, to steal personal data and provide attackers with remote access to victims' computers.

The campaign has been active since January 2026 and continues to add between 2,000 and 3,000 new infections daily, researchers said. The United States has seen the largest share of infections, followed by Germany, India, the United Kingdom, Italy, Vietnam, Canada, Norway, Sweden, Finland, and Spain. The operation distributes malware through YouTube videos promoting fake Minecraft mods and utilities, with download links placed in video descriptions and comments. Attackers also use search engine optimization poisoning, targeting mods with unique names hosted on unofficial file-sharing sites to dominate search results.

What distinguishes WeedHack is its accessibility. The malware-as-a-service platform is hosted on the open web and offers a free tier, significantly lowering the barrier to entry for would-be attackers. Premium...