AI Weekly Malaysia

McAfee Labs reports that the Weedhack malware family is being distributed through fake Minecraft client websites that mimic legitimate projects via SEO poisoning and YouTube redirects, with over 6,300 blocked access attempts. One malicious site was built using Lovable, an AI-powered website builder, demonstrating how no-code AI tools can be used to quickly create convincing phishing pages. The attack chain deploys JAR payloads that collect system information, add Microsoft Defender exclusions, and steal data, with nearly half of malicious URLs hosted on Discord.

Why: The notable detail for builders is that an AI website builder (Lovable) was used to create a convincing malicious site, which is a concrete data point on how generative tooling lowers the effort bar for phishing infrastructure. However, this is primarily a consumer gaming malware story with no direct infrastructure, API, or tooling impact for this audience.