Hackers Target Yet Another Steam Game With Malware. Here's How They Did It

July 28, 2026 - 01:57

A new wave of cyberattacks has hit the Steam platform, this time targeting players of the game Meccha Chameleon. Security researchers have discovered that hackers are using the game's community-created maps as Trojan horses to slip malware onto unsuspecting players' computers.

The attack method is deceptively simple. Malicious actors upload custom maps for Meccha Chameleon that appear to be normal, user-generated content. Once a player downloads and runs one of these infected maps, the file executes hidden code that installs a backdoor or data-stealing program on the system. Unlike traditional game hacks that require players to download separate executables, this approach exploits the game's own map-loading system, making it harder for antivirus software to flag the threat.

The malware payloads so far appear to target login credentials, cryptocurrency wallets, and session tokens. In some cases, the malware can also take screenshots or record keystrokes. Because the maps are hosted on Steam's official Workshop, players may mistakenly trust them as safe. Valve has not yet commented on the specific incident, but the company typically removes malicious content once it is reported.

For now, players should avoid downloading any Meccha Chameleon maps from unknown creators, especially those with suspiciously high ratings or recent upload dates. Running only maps from trusted community members and keeping antivirus software updated are the best defenses. This incident serves as a reminder that even legitimate game platforms can become vectors for malware when hackers find creative ways to abuse user-generated content.