Malware discovered hidden in popular Meccha Chameleon game maps
Steam Workshop maps contained malicious code targeting players' computers.
1Threat hidden in game maps
Independent researcher Feint investigated player reports of strange black windows appearing during custom map loads in Meccha Chameleon. The 'Laser Tag Neon' map was found to secretly install a hidden file on computers the moment it loaded.
2Multi-stage attack revealed
The hidden file reportedly downloaded a more dangerous second-stage malware from the internet. After removal of the first map, another infected map called 'Chroma Grid Arena' appeared, providing attackers with remote access to compromised systems.
3Security patch implemented
Co-developer Haganeiro addressed the vulnerability in update 3.1.0 and disabled malicious code on affected maps. However, players who haven't updated remain at risk from the security threat.
4Attack spreads to developer team
According to Dexerto, a systems engineer analyzing the malware had their backup computer infected. Hackers used this access to take control of the engineer's Discord account, modifying server permissions and banning staff members.
5Community server compromised
The hackers gained control of the game's 100,000-member official Discord server, though they reportedly couldn't access source code or Steam developer accounts. The studio has established a replacement server while awaiting Discord's response.
6Critical warning for game security
This incident serves as an important warning about community security and risks of third-party content in gaming. Players should prioritize timely updates and exercise caution with suspicious downloads to protect their systems.
Original article: Mashable — Meccha Chameleon oyununda kötü amaçlı yazılım tespit edildi