A malware campaign called WeedHack has infected over 116,000 Minecraft systems since January, targeting players through the popular gaming platform.
Security researchers have identified WeedHack as a large-scale malware operation focused on compromising Minecraft installations. The campaign began in January and has grown to affect more than 116,000 systems globally.
The malware leverages vulnerabilities and social engineering tactics to gain access to player accounts and systems. Victims are typically lured through fraudulent mod downloads, cracked game versions, or compromised third-party Minecraft launchers.
Once installed, WeedHack can steal credentials, harvest cryptocurrency mining resources, and deploy additional malware payloads. Infected systems may experience degraded performance as the malware consumes processing power.
Minecraft's popularity among both casual and hardcore gamers makes it an attractive target for malware developers. The game's modding ecosystem, while legitimate, creates additional vectors for malware distribution.
Security experts recommend Minecraft players download mods and launchers only from official sources. Users should enable two-factor authentication on gaming accounts and keep systems updated with the latest security patches.
The scale of the WeedHack campaign underscores broader security risks in gaming communities. Similar operations have targeted other popular games and platforms, exploiting player trust to distribute malicious software.
Affected users should run antivirus scans, change account passwords, and monitor for unauthorized access. Game publishers continue working with security researchers to identify and block malware distribution channels.
Researchers at Cisco Talos developed a new framework to detect malware and hacking tools powered by AI chatbots. The discovery revealed an unusual threat: autonomous malware operating without human handlers.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive ordering federal agencies to patch a high-severity vulnerability in Zyxel GS1900 series switches. Attackers are actively exploiting the flaw to steal data.
WordPress disclosed an unauthenticated path traversal vulnerability that could lead to conditional remote code execution. The issue affects WordPress core and has been documented in an official security advisory.
Security researchers have demonstrated an attack allowing hackers with privileged access to register fake MFA providers and harvest user passwords during login. The vulnerability exploits the authentication process itself.