A malware campaign targeting Minecraft is said to have infected more than 116,000 players.

      What began as another modding initiative for Minecraft has evolved into one of the more alarming malware incidents linked to gaming communities this year. Security experts at McAfee have identified a widespread malware operation named “WeedHack,” which has reportedly compromised over 116,000 devices, mainly targeting Minecraft players through counterfeit mods, cheats, pirated software, and community tools.

      Unlike many typical malware operations that focus solely on stealing passwords or cryptocurrency wallets, this one seems to include elements of harassment, cyberbullying, and invasive surveillance.

      As per McAfee’s findings, the operation was allegedly run by a teenager and relied heavily on Discord, Minecraft communities, and social engineering methods to disseminate harmful files disguised as popular game-related downloads.

      A malware operation targeting Minecraft communities

      Researchers indicate that WeedHack spread via malicious Minecraft mods, cheats, installers, macros, and pirated tools circulated across Discord channels and gaming forums. Victims thought they were downloading performance modifications or gameplay enhancements, but instead, they installed malware capable of stealing personal data and remotely accessing devices.

      The malware was said to have collected browser credentials, Discord tokens, cryptocurrency wallet information, screenshots, and personal files. In some instances, victims were allegedly blackmailed, harassed, or publicly shamed using their stolen private data.

      McAfee notes that the operation relied significantly on young gamers trusting files shared within online communities. Minecraft remains one of the largest gaming ecosystems globally, with millions of active users and a vast modding culture that often involves downloading third-party software from unofficial sources.

      This openness has created a conducive environment for the rapid dissemination of the malware campaign.

      The report also points out how modern malware operations are increasingly merging cybercrime with online harassment culture. Researchers indicate that some victims experienced targeted bullying and intimidation post-infection, making the campaign more invasive than typical financially motivated attacks.

      The malware reportedly adapted continually to evade antivirus detection, with operators updating payloads and distribution techniques across various platforms.

      Why this campaign is particularly alarming

      Gaming communities have increasingly become prime targets for cybercriminals as younger users tend to install unofficial files more casually compared to enterprise users or seasoned professionals.

      Minecraft, in particular, boasts one of the largest ecosystems for user-generated content in gaming, making it exceptionally challenging for players to differentiate between safe mods and harmful downloads.

      McAfee

      The magnitude of the WeedHack campaign also illustrates how accessible cybercrime tools have become. Researchers propose that the operation did not need sophisticated state-backed infrastructure or advanced hacking tools to infect over 116,000 devices worldwide.

      More crucially, the campaign underscores how malware is evolving beyond mere financial theft. Cybercriminals are increasingly weaponizing personal information, Discord access, screenshots, and online identities for harassment and social manipulation.

      What players should do

      McAfee advises Minecraft players to refrain from downloading mods, cheats, or pirated software from unofficial Discord servers or unverified sources. Users are also encouraged to enable multi-factor authentication, regularly check devices for malware, and refrain from reusing passwords across gaming platforms.

      The report serves as a reminder that gaming platforms are no longer insulated from broader cybersecurity threats. Online gaming communities increasingly function similarly to social networks and face the same risks associated with scams, surveillance, account theft, and coordinated abuse.

      For Minecraft players, the more significant lesson is an uncomfortable yet vital one: the greatest threat online may no longer be the creepers in the game, but rather the files being downloaded from outside it.