Malware hidden inside popular 'Meccha Chameleon' game maps
Players of the indie game 'Meccha Chameleon' were targeted by malware hidden within custom Steam Workshop maps. While the developer has released a fix, the incident resulted in the compromise of a staff member's Discord account and temporary disruption of the game's community server.
Why it matters
This incident underscores the security risks associated with user-generated content platforms and the potential for supply-chain attacks in gaming.
Players of indie hit Meccha Chameleon have been warned to update the game and steer clear of its original Discord server after malicious Steam Workshop maps infected PCs.In a report from Dexterto, the issue was first uncovered by independent researcher Feint, who looked into player reports of strange black windows briefly flashing on screen while loading custom maps. Feint traced the problem to a downloadable map called "Laser Tag Neon," which secretly installed a hidden file on players' computers the moment it loaded.
Meccha Chameleon: Xbox and phone release plans, where you can try it now
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in