Meccha Chameleon Malware Maps Prompt Discord Server Takeover

A major security incident has compromised the popular indie game Meccha Chameleon, with malicious custom maps distributed through Steam Workshop attempting to install malware on players' computers and leading to the hijacking of the game's official Discord server. The vulnerability, which was active in late July 2026, has since been patched by the developers.

The issue was first identified and publicly detailed by independent cybersecurity researcher Feint, who began investigating after players reported seeing a brief Command Prompt window appear when loading certain custom maps. The investigation focused on a Workshop map titled "Laser Tag Neon," which contained hidden malicious code within its Unreal Engine Blueprints. When executed in a match, the map would write a batch file named "s.bat" to a player's Documents folder. This file would then launch a hidden PowerShell process to download and execute a second-stage payload from a remote server.

Although the attacker's server returned an error during Feint's initial analysis, preventing identification of the final payload at that time, the researcher later reported that the secondary script installed a Remote Access Trojan...