Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown
Attackers keep distributing WeedHack malware through fake Minecraft clients even though the original infrastructure was taken down in July.
28
Malware
WeedHack
- Mentions · 7d0
- Mentions · 30d0
- All mentions3
- First seenAug 24, 2026
- Last mentionedAug 25, 2026
Timeline
3 articles · newest firstFake Minecraft Sites Are Still Spreading WeedHack After C2 Takedown
McAfee says WeedHack infostealer MaaS still spreads via ten fake Minecraft client sites and SEO poisoning despite C2 takedown, with 116,464 infections logged.
45
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
McAfee Labs reports Weedhack malware spread via spoofed Minecraft client websites using SEO poisoning, with over 6,300 blocked access attempts.
45
Appears with
- Minecraftproduct · 2
- Discordvendor · 1
- Check Pointvendor · 1
- McAfeevendor · 1
- McAfee Labsvendor · 1
- Xenon Clientproduct · 1
- Lovablevendor · 1
- Minecraft playersvictim · 1
- Microsoft Defenderproduct · 1
- McAfee Labsorganization · 1
- Dropboxvendor · 1
- AnimateClippermalware · 1
- MediaFirevendor · 1
- Remus Stealermalware · 1
- SessionGatemalware · 1
- GitHubvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.