Meccha Chameleon: Malware Exploit Found In Trendy Indie Game
Developers said the flaw came from community maps, not the game itself, and that patch 3.1.0 blocks further malware delivery.
- Developers of Meccha Chameleon released update 3.1.0 to neutralize malware hidden in Steam Workshop community maps, making it 'impossible to execute unrelated files such as malware,' according to developer Lemorion.
- On Friday, independent researcher Feint reported that a Laser Tag Neon map secretly installed hidden files on players' computers, later confirming new malicious maps like Chroma Grid Arena appeared after removal.
- Loading the infected maps triggered a Command Prompt window to download secondary scripts, installing a Remote Access Trojan on users' PCs; only workshop downloaders were impacted out of 15 million copies sold.
- Hackers compromised a system engineer's computer during the investigation, bypassing the engineer's Discord 2-Factor Authentication to ban staff members; Discord server permissions were restored Sunday.
- Feint advises that 'updating to the latest version is strongly recommended' to protect against vulnerabilities, though users should continue exercising caution when downloading Steam Workshop content, as new malicious maps could still be uploaded.
12 Articles
12 Articles
Malware found hidden inside popular 'Meccha Chameleon' game maps
An infected system engineer's PC also led to attackers seizing control of the game's nearly 100,000-member Discord server. Players of indie hit Meccha Chameleon have been warned to update the game and steer clear of its original Discord server after malicious Steam Workshop maps infected PCs.In a report from Dexterto, the issue was first uncovered by independent researcher Feint, who looked into player …
User-made maps from Steam top-seller Meccha Chameleon have been found to contain malware, just as the game's official Discord server got hacked
The indie viral mega-hit prop hunt game Meccha Chameleon has had quite the unfortunate weekend. The game's developer has responded to a report claiming some of the game's Steam Workshop maps included malware. Those maps are user-created, and - like all Workshop maps - were available to download by anyone who owns the game.
Meccha Chameleon: Malware Exploit Found In Trendy Indie Game
Custom maps for the indie hit Meccha Chameleon distributed through the Steam Workshop were exploited in an attempt to install malware on players’ computers. The security breach came to light following an independent investigation that identified suspicious command-line instructions hidden inside community-created scenarios. Developers confirmed the vulnerability and released patch 3.1.0 to block further exploitation. The core security flaw did n…
Coverage Details
Bias Distribution
- 60% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium
