Malware Hijacks Meccha Chameleon Community Discord Server

A series of infected custom maps in the indie game Meccha Chameleon has evolved into a full-scale security breach, resulting in the compromise of the game’s official Discord server. Researchers discovered that simply loading malicious Steam Workshop content granted attackers remote access to player machines and eventually developers.

Today, 01:30
1,191 0
Malware Hijacks Meccha Chameleon Community Discord Server

The threat was first identified by researcher Feint, who investigated reports of suspicious black windows appearing during the loading of custom maps. The map "Laser Tag Neon" was found to execute a hidden file that subsequently fetched secondary, more potent malware. While the developers removed that specific map, a replacement titled "Chroma Grid Arena" surfaced shortly after. Feint confirmed that the infection requires players to actively load and play the compromised maps to trigger the exploit.

Even after the studio released update 3.1.0 to patch the vulnerability, the situation escalated. A systems engineer working for the developers fell victim to the malware, which then allowed hackers to seize control of the engineer's Discord account. According to developer LEMORION, the intruders utilized this access to ban staff members and alter permissions within the official server, which hosts approximately 100,000 members. The studio maintains that the breach did not extend to game source code or developer accounts and has established a temporary replacement server while awaiting support from Discord.

Share

Comments (0)

Leave a comment

No comments yet. Be the first!