In July, fans of the online hide-and-seek game Meccha Chameleon raised the alarm. The project supports the "Steam Workshop," where users publish various modifications — some of which turned out to be infected. For example, malicious files were found in the "Laser Tag Neon" map, which has since been removed from the "Workshop."
According to player feedback, infection requires not just downloading the map, but also starting a match on it. Members of the Meccha Chameleon community recommend that those who played on a "potentially malicious map" check "My Documents" and other folders for recently created files with the .bat extension, and also check autostarts and the task scheduler.
The creators of Meccha Chameleon were also affected. The developers reported that the official Discord* server for the game was hacked:
The game itself is NOT affected. Currently, the official Meccha Chameleon Discord server has been compromised, and we are completely unable to take any action on our part. We have already contacted Discord support and are awaiting their response. If the server cannot be restored, we will create a new one.
- *(violates Russian Federation legislation requirements)