Downloaded a custom map for Meccha Chameleon recently? A researcher says it may have installed malware on your PC.

Users of the indie game Meccha Chameleon have been warned by a researcher that downloading certain custom maps from the Steam Workshop may have installed malware on their personal computers. This security breach involved the use of these maps as malware droppers to compromise user systems. According to coverage from Windows Central and TwistedVoxel, the risk was identified through researcher warnings that specifically targeted players who had recently added custom content to their game libraries via the official Steam Workshop integration. Multiple outlets, including mxdwn Games, GameLuster, and digit.in, report that the developers of Meccha Chameleon have since issued a patch to address the Steam Workshop malware issue. Panda Security has also detailed how hackers utilized the Workshop platform to distribute the malicious software.

The coverage emphasizes a broader security failure, as KeenGamer reports that the game's official Discord server was hacked. This Discord breach occurred shortly after the implementation of a recent anti-malware patch, suggesting a coordinated attack across different community hubs. Digital Trends identifies Meccha Chameleon as the hottest indie game on Steam, which explains why it became a high-value target for these malicious actors. The context provided by the reports indicates that the attackers leveraged the game's popularity and the trust associated with the Steam Workshop to deliver their payload. The sequence of events shows a progression from the distribution of infected map files to a direct breach of the developers' official communication channels on Discord, creating a multifaceted security crisis for the player base.

Future developments to monitor include the ongoing investigation into the Discord hack mentioned by mxdwn Games. While the Steam Workshop has been patched, the full extent of the Discord breach and any potential further compromises remain under scrutiny. Users are advised by digit.in to follow safety protocols to protect their systems. Monitoring will focus on whether the developers provide further updates regarding the security of their community platforms and if additional vulnerabilities are discovered in the game's custom content pipeline.