WeedHack: The $5 Malware Turning Minecraft Players Into Cyberbullies

Researchers at McAfee Labs identified over 116,000 malicious hits linked to the campaign, which currently logs up to 3,000 new infections daily. The malware hides inside fake Minecraft mods and game clients distributed via YouTube and SEO-poisoned search results. Once a user downloads these compromised files, the attacker gains access to a professional-grade dashboard to monitor their victim.

The software operates on a tiered subscription model, with a free version capable of harvesting passwords, session IDs, and cryptocurrency wallet keys from dozens of browsers. Those who pay the $5 monthly fee unlock invasive remote-access features, including webcam control, live screen sharing, and keylogging. McAfee discovered a Telegram channel boasting 850 members where users, many appearing to be minors, coordinate harassment campaigns and share tactics for spying on their victims.

Because many Minecraft clients lack official distribution channels, bad actors easily manipulate search rankings to host malicious clones. Experts advise players to avoid third-party sites and maintain updated antivirus software. For victims facing blackmail or threats, authorities recommend contacting the Internet Crime Complaint Center and alerting a trusted adult immediately.