The hottest indie game on Steam just had a malware scare
One of Steam’s biggest success stories of 2026 has suddenly found itself at the center of a security scare. A security researcher has discovered that a community-made Meccha Chameleon Workshop map contained code designed to write files outside the game and launch a hidden PowerShell process that attempted to download an additional payload from an external server. The investigation, published by security researcher Feint, began after players noticed a Command Prompt window briefly flashing on screen while Steam downloaded a custom Workshop map called Laser Tag Neon.
- ▪One of Steam’s biggest success stories of 2026 has suddenly found itself at the center of a security scare.
- ▪A security researcher has discovered that a community-made Meccha Chameleon Workshop map contained code designed to write files outside the game and launch a hidden PowerShell process that attempted to download an additional payload from an
- ▪The investigation, published by security researcher Feint, began after players noticed a Command Prompt window briefly flashing on screen while Steam downloaded a custom Workshop map called Laser Tag Neon.
Digital Trends files mainly under tech. We currently carry 419 of its stories.
Opening excerpt (first ~120 words) tap to expand
One of Steam’s biggest success stories of 2026 has suddenly found itself at the center of a security scare. A security researcher has discovered that a community-made Meccha Chameleon Workshop map contained code designed to write files outside the game and launch a hidden PowerShell process that attempted to download an additional payload from an external server. How did a custom map become malware? The investigation, published by security researcher Feint, began after players noticed a Command Prompt window briefly flashing on screen while Steam downloaded a custom Workshop map called Laser Tag Neon. Digging deeper, the researcher found that the map wasn’t hiding an executable file in the traditional sense.
…
Excerpt limited to ~120 words for fair-use compliance. The full article is at Digital Trends.
Discussion
0 commentsMore from Digital Trends
