Indie‑viral prop‑hunt hit Meccha Chameleon saw user‑made Steam Workshop maps infected with malware, coinciding with a hack of its official Discord server. The developer released a patch to remove the malicious maps and urged players to scan their systems.
Key Takeaways
- Some user‑created Steam Workshop maps for Meccha Chameleon contained a malware dropper.
- The developer's Discord server was compromised, spreading false RAT warnings.
- Patch v3.1.0 removed the malicious maps and fixed the vulnerability.
The indie‑viral mega‑hit prop‑hunt game Meccha Chameleon endured an unlucky weekend. Independent researcher Feint reported that the Steam Workshop map “Laser Tag Neon” hid a malware dropper, prompting its swift removal.
Feint’s Medium post described how a friend saw a brief command‑prompt window during download, leading to the discovery. A second infected map, “Chroma Grid Arena,” appeared shortly after but was also taken down.
Developer Lemorion_1224 clarified on the game’s Steam page that the core game is safe; the false RAT claim originated from a hacker who had already breached the official Discord, posting deceptive fix instructions.
On Saturday the team rolled out version 3.1.0, a patch that blocks malware execution from maps and resolves several bugs. Feint advises anyone who ran the affected maps before updating to perform a full malware scan.
Why This Matters
BozokMedia analysis shows that community‑driven platforms like Steam Workshop become attractive vectors for cyber‑crime, putting millions of gamers at risk when trust is exploited.
"Malware hidden in game mods is a growing threat that exploits the trust of community‑driven platforms." — Cybersecurity analyst Dr. Aisha Khan
Frequently Asked Questions
Q: How can I tell if a map is infected?
A: Keep the game updated, download only from trusted creators, and verify file sizes and hashes.
Q: Will future updates prevent similar attacks?
A: The new patch tightens security checks, but user vigilance remains essential.
