{"id":86571,"date":"2026-07-27T16:12:10","date_gmt":"2026-07-27T20:12:10","guid":{"rendered":"https:\/\/vgvote.com\/?p=86571"},"modified":"2026-07-27T16:38:28","modified_gmt":"2026-07-27T20:38:28","slug":"meccha-chameleon-players-are-getting-malware-from-user-made-maps","status":"publish","type":"post","link":"https:\/\/vgvote.com\/?p=86571","title":{"rendered":"Meccha Chameleon Players Are Getting Malware From User-Made Maps"},"content":{"rendered":"\n

Meccha Chameleon<\/a>–a multiplayer prop-hunt game that’s been blowing up on Steam lately–seems to have hit its first real road bump since it launched in early June. As pointed out by a player who goes by Feint, some of the game’s player-made maps are basically just Trojan horses containing malware. One of Feint’s friends had mentioned briefly seeing a command prompt appear while they were downloading the map. Curious, Feint dug into the files and concluded that the map known as Lazer Tag Zero contained a “malware dropper.”<\/p>\n

The map was quickly pulled from Meccha Chameleon’s Steam Workshop page after Feint published their findings<\/a> in a Medium article. But the chaos was just beginning. Other malware-filled maps started appearing, and then the game’s official Discord server was hacked.<\/p>\n

“Security was completely breached, the server creator’s account was hijacked, and all admins were banned, so we can’t take action from our side,” Meccha Chameleon creator Lemorion_1224 shared in an auto-translated X post<\/a> over the weekend.\u00a0<\/p>\n

The news was also shared via an update on the game’s Steam page<\/a>, clarifying that the game itself wasn’t a security risk, and could still be played safely as long as user-made maps weren’t used. Still, things<\/p>\n","protected":false},"excerpt":{"rendered":"

Meccha Chameleon–a multiplayer prop-hunt game that’s been blowing up on Steam lately–seems to have hit its first real road bump since it launched in early June. As pointed out by a player who goes by Feint, some of the game’s player-made maps are basically just Trojan horses containing malware. One of Feint’s friends had mentioned…<\/p>\n","protected":false},"author":57,"featured_media":86573,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[56],"tags":[],"class_list":["post-86571","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-external"],"_links":{"self":[{"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/posts\/86571"}],"collection":[{"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/users\/57"}],"replies":[{"embeddable":true,"href":"https:\/\/vgvote.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86571"}],"version-history":[{"count":2,"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/posts\/86571\/revisions"}],"predecessor-version":[{"id":86574,"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/posts\/86571\/revisions\/86574"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vgvote.com\/index.php?rest_route=\/wp\/v2\/media\/86573"}],"wp:attachment":[{"href":"https:\/\/vgvote.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86571"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vgvote.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86571"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vgvote.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}