LoaderClient Malware Uses Ethereum Smart Contracts to Keep WeedHack C2 Infrastructure Alive

A new Minecraft-based malware, LoaderClient, is aggressively stealing session credentials and OAuth tokens by hiding its command-and-control infrastructure within the blockchain. Disguised as a generic Fabric modification, this malicious payload serves as the initial infection vector for the rapidly expanding WeedHack campaign. Once executed, it secretly harvests live authentication data without triggering typical operating system warnings. The malware stands out by avoiding…