Meccha Chameleon Steam Workshop and Discord Compromised by Malware

Steam Workshop custom map downloads have exposed players to a malware risk after malicious files bypassed the platform’s verification checks, according to a report published on Medium by an affected player who first flagged the suspicious behavior. The security breach affected user-generated content for an unnamed game, where at least one downloadable map contained files engineered to deploy malware onto local machines.

Developer Response and Patch Details

The development team patched the vulnerability in the 3.1.0 update, neutralizing the malicious code embedded within the infected custom maps, according to an official statement from the studio. Players running the updated game version are no longer exposed to the file-drop exploit through the Workshop interface. However, the studio advised anyone who downloaded custom maps in the days prior to run a full virus scan on their systems.

Discord Server Compromise

The security incident escalated when attackers compromised the official 100,000-member Discord community server during the studio’s ongoing remediation work. According to the development team, an engineer’s backup computer became infected during the cleanup process, allowing the attacker to bypass two-factor authentication, alter server permissions, and strip the entire moderator team of their roles.

Steps to Protect Your System

Studio representatives confirmed they have contacted Discord customer support to recover the hijacked community hub. If recovery efforts fail, the team plans to launch an entirely new official community space. In the interim, administrators urge community members to avoid clicking any suspicious hyperlinks appearing on the compromised Discord server.

Frequently Asked Questions