Meccha Chameleon malware maps lead to official Discord server takeover

Meccha Chameleon players have been warned to update the game and avoid its original Discord server after malicious Steam Workshop maps infected PCs and helped attackers compromise a developer account. The security issue was first detailed by independent researcher Feint, who investigated reports of command prompt windows appearing as players loaded custom Meccha Chameleon maps. Feint discovered that a Workshop map named Laser Tag Neon contained code capable of writing a batch file to a player’s Documents folder. Meccha Chameleon update patches Workshop exploit Developer Haganeiro confirmed that the vulnerability was fixed with Meccha Chameleon update 3.1.0.