Malware hidden inside popular 'Meccha Chameleon' game maps

July 27, 2026 - 17:16

Security researchers have uncovered a sophisticated malware campaign targeting players of the indie game "Meccha Chameleon." The malicious code was hidden inside custom game maps that appeared to be legitimate downloads from the game's community. Once players loaded these infected maps, the malware would activate, giving attackers access to their systems.

The breach escalated far beyond individual players. Investigators discovered that the attackers managed to compromise the PC of a system engineer who worked on the game's infrastructure. This single infection allowed the hackers to take full control of the official "Meccha Chameleon" Discord server, which has nearly 100,000 members. The server was then used to distribute more infected files and phishing links to unsuspecting community members.

The malware itself is designed to steal login credentials, browser data, and cryptocurrency wallet information. It spreads by modifying game files on the infected system, which then gets uploaded to map-sharing platforms when the user shares their creations. This creates a cycle of infection that is difficult to break.

Game developers have issued an emergency update that scans for the malicious code and blocks infected maps from being loaded. They are also working with Discord to restore the compromised server. Players are advised to change their passwords immediately and run antivirus scans if they have downloaded any custom maps in the past month. The full extent of the data breach is still under investigation.