A poisoned mod reportedly hijacked players of a Steam game and fired slurs at their friends, which wasn’t the multiplayer anyone ordered.
The game was People Playground, a ragdoll sandbox with hundreds of thousands of Steam reviews, and its Workshop had already weathered a self-replicating mod that wiped saves in February. Since then, malware-laced maps helped hackers seize Meccha Chameleon’s Discord, which left Workshop fans understandably twitchy, but round two turned out far nastier.
Developer mestiez disabled the Workshop on September 22 and warned in a Steam post that this latest malicious mod was “especially bad” in a statement that opened with the following: “You might have noticed the Workshop has disappeared again. I disabled it quite a few hours ago due to yet another malicious mod. This one is especially bad.”
Anyone who launched a modded copy on September 21 was told to delete their mods folder, run an antivirus scan, and leave the game closed until further notice. mestiez first insisted the malware didn’t steal credentials, then struck that line out and advised players to change the passwords on every important account so that any session tokens it may have siphoned would stop working.
According to the developer, the program could wipe a considerable chunk of personal data and publish Discord usernames and other identifying details to the Workshop.
A Reddit user who dissected the mod claimed it went further still, since it allegedly hijacked Steam accounts to republish itself, trashed files for other installed games, and blasted slurs at victims’ Steam friends.
Studio Minus then shipped a build that stops mods from running entirely, and on Discord it said mod support would only return once mods are fundamentally safe, which “might never happen.”
Meccha Chameleon malware maps lead to official Discord server takeover
سەرچاوەی فەرمی بە زمانی ئینگلیزی: https://www.dexerto.com/gaming/steam-game-shuts-off-mods-after-malware-hijacks-accounts-and-sends-slurs-to-players-friends-3412254/
