Meccha Chameleon Malware Attacks Discord Server After Workshop Exploit

Developers warn of Meccha Chameleon PC malware after Discord server taken over

Mexch Chameleon players have been warned to update the game and avoid its original Discord server following a series of attacks by cybercriminals. Malicious Steam Workshop maps infected PCs, compromising developer accounts.

Independent researcher Feint discovered malicious code in these maps that attempted to download and execute additional payloads with administrative privileges on the affected machines. The incident spread to the game’s official Discord server, which has now been partially taken over by attackers.

A system engineer's compromised PC allowed hackers to change server permissions and ban all staff members. The affected device had no access to source code or game files.

According to developer Haganeiro, the vulnerability in the custom maps was fixed with Meccha Chameleon update 3.1.0, so there are no issues after applying it. However, players who launched suspicious Workshop maps before updating are advised to run a full malware scan and check their Documents folder for recently created .bat files.

Developer statement on the matter:

“The vulnerability in the custom maps described today has been fixed with update 3.1.0, so there are no issues after applying it,” said developer LEMORION.

Frequently Asked Questions

What is Meccha Chameleon?

Meccha Chameleon is an indie game where players fight in arena battles using various weapons and powers.

How can I protect my PC from malware after this incident?

Players should update the game to version 3.1.0, run a full malware scan of their device, and avoid suspicious Workshop maps until further notice.

@Feint also recommends checking your Documents folder for recently created .bat files as these may indicate malicious activity.