McAfee researchers have identified a dangerous new malware called WeedHack, which disguises itself within Minecraft mods to steal sensitive user data and gain remote control over infected Windows computers.

Key Points

• WeedHack is a Malware-as-a-Service (MaaS) campaign active since January that targets Minecraft players via malicious mod files.
• The malware disables Windows Defender and steals credentials from browsers, Steam, Discord, and crypto wallets.
• Premium versions of the software allow attackers to access webcams, record screens, and execute remote command-line operations.
• Over 116,000 users have been affected, with the campaign currently averaging 2,000 to 3,000 new infections daily.
• Security experts advise downloading mods only from verified platforms like CurseForge, Modrinth, Nexus Mods, or ModDB.

Why it Matters

This campaign highlights the significant security risks posed by low-cost, accessible malware targeting younger gaming demographics. The widespread use of these tools for cyberbullying and data theft underscores the critical need for users to verify the legitimacy of third-party software downloads.