The Montgomery County Police Department is warning residents, especially Minecraft players and their families, about a widespread malware campaign known as “WeedHack” that is being spread through fake Minecraft mods, clients and game downloads.
According to police, cybercriminals are disguising malware as popular Minecraft modifications and distributing them through fake websites, YouTube download links and unofficial game clients. Once installed, the malware can secretly give attackers access to a victim’s computer and personal information.
Since January 2026, more than 116,000 players have reportedly been infected, with an estimated 2,000 to 3,000 new infections occurring each day.
Police say the malware can:
- Steal passwords and online account information.
- Hijack Minecraft, Discord, Steam and Telegram accounts.
- Access cryptocurrency wallets.
- Capture screenshots and monitor computer activity.
- Disable security protections.
- Install hidden backdoors that allow attackers to maintain ongoing access.
More advanced versions can also activate webcams, monitor a victim’s screen, keyboard and mouse activity, record keystrokes and upload, download or delete files. Police also warn that some attackers have used the malware to harass victims by accessing and sharing private webcam footage without their consent.
To help stay protected, MCPD recommends:
- Download Minecraft mods only from trusted, official sources.
- Be cautious of YouTube links and websites offering “free” clients or cheats.
- Use strong, unique passwords and enable multi-factor authentication whenever possible.
- Keep antivirus software updated and enabled.
- Parents should talk with children and teens about the risks of downloading unofficial game software.
“A new game mod should never cost you your privacy,” the department said. Anyone who believes they have been targeted or victimized is encouraged to report the incident to the Montgomery County Police Department at 301-279-8000.
