The indie hit game Meccha Chameleon has addressed a security breach involving malware-infected Steam Workshop maps and a compromised official Discord server, prompting a mandatory game update for players.

Key Points

• Independent researcher Feint discovered malware droppers embedded within user-created Steam Workshop maps, specifically Laser Tag Neon and Chroma Grid Arena.
• Developer Lemorion_1224 confirmed that a system engineer’s PC was compromised, allowing hackers to bypass Discord two-factor authentication and ban official staff.
• The developer released patch version 3.1.0 on Saturday to resolve the vulnerability that allowed Workshop maps to execute malicious code.
• Players who downloaded affected maps prior to the patch are advised to perform full system malware scans to ensure their devices remain secure.
• The official Meccha Chameleon Discord server has been restored following the temporary takeover by unauthorized actors.

Why it Matters

This incident highlights the significant security risks associated with user-generated content platforms, even for highly popular titles that have sold millions of copies. It serves as a critical reminder for both developers and players to maintain rigorous cybersecurity hygiene when interacting with community-driven game modifications.