Atozy broke down the McAfee report on a malware as a service operation that has infected over 116000 Minecraft systems since January by posing as free mods and hacked clients. The campaign averages 2000 to 3000 new victims a day and is pulling in teens as both targets and perpetrators.
If you play Minecraft and download anything outside the official launcher or trusted mod sites, there is a decent chance the people behind WeedHack have already thought about you. On June 11 Atozy dropped a video covering a McAfee Labs report that lays out the operation in cold detail. Over 116000 infections logged since January. Two to three thousand new victims every single day. More than 3820 unique malicious files.
This is not random kids in a basement
The report describes a full malware as a service setup. Operators release versions disguised as popular free Minecraft mods or cracked clients. Once installed the malware phones home, steals Microsoft account credentials, browser data, and more. Some versions apparently turn infected teens into distributors who spread it to their friends for clout or small payments. The business model is mature enough that it runs like any other SaaS except the product is owned Minecraft accounts and compromised machines.
Atozy frames it as the kind of story the average player scrolls past until their own account or their friends list gets hit. The numbers suggest it is already happening in every major server, Realm, and SMP whether people admit it or not. Stolen accounts get used for scams, griefing, or sold on underground markets. The victims often do not even realize their machine is part of the botnet until it is too late.
McAfee published the deep dive on June 2. The Atozy video on the 11th brings it straight to the Minecraft audience that actually needs to hear it. Whether this generates any meaningful change in behavior is another question. History says most will keep downloading random files and hoping for the best.
- WeedHack has logged 116464 infections since January 2026
- Daily infection rate sits between 2000 and 3000 new victims
- Malware primarily spreads through fake mods and game clients
- Some variants recruit infected users to spread it further
- Targets include Microsoft logins tied to purchases and progress
If you run a server, manage a community, or just play with friends the practical takeaway is simple. Verify every download. Use official sources. Run actual antivirus that catches this stuff. And stop pretending the problem only happens to other people. The numbers say it is happening right now.
