Over 116,000 Minecraft systems infected in WeedHack malware campaign
A large-scale malware campaign, dubbed WeedHack, has infected over 116,000 Minecraft systems since January, primarily through malicious mods and clients promoted on YouTube and via SEO poisoning. The operation is a malware-as-a-service (MaaS) platform offering stolen credentials and data collection capabilities, targeting Minecraft players globally.
The WeedHack campaign utilizes a variety of distribution methods, including malicious mods, clients, and cheats promoted through YouTube videos and SEO poisoning targeting popular Minecraft clients like Meteor Client and Wurst Client. The attacker employs deceptive tactics, such as creating realistic-looking videos and mimicking legitimate websites, to trick users into downloading the malware. This campaign is a MaaS operation, offering a dashboard to customers to view stolen data and manage compromised systems.