We just made an article praising Meccha Chameleon and its enormous success. Now, it has a problem, but it’s not something that they can control. Apparently, they had a little dance with the Malware bug, and players are being warned to be cautious right now.
IF YOU PLAN ON PLAYING MECCHA CHAMELEON NOW, BE SURE TO CHECK IF THE PROBLEM HAS BEEN FIXED, OR EVEN CHECK WHAT’S NEEDED TO BE DONE.
What happened to the game?
A couple of days ago, the game experienced a security incident involving malicious software that affected parts of its website. The malware was designed to secretly capture sensitive customer information entered during the checkout process, making it an example of a supply chain or e-commerce website compromise.
The attackers inserted malicious code into the website, allowing it to monitor payment pages. When customers entered personal and financial information such as names, addresses, email addresses, and credit card details, the malware intercepted and transmitted the data to servers controlled by the attackers before the information reached the legitimate payment processor. This type of attack is commonly known as a web skimming or Magecart attack because it targets online shopping websites rather than individual users’ devices.
Where does the malware come from?
According to users, the malware was placed on the game’s Steam Workshop page. When you download mods or anything available at the Workshop, some of the items and maps were infected. Just as we stated, the malware could allow the hackers to take control of the devices of the players. This malware doesn’t affect the mobile version, as far as we know. It is mostly for those published works on the Steam Workshop. However, it still pays to be safe, so make sure to check out your game before launching it.
Company response
After discovering the unauthorized code, Meccha Chameleon removed the malware from its website and began investigating the incident. The company worked to identify how the attackers gained access, strengthened its security measures, and notified affected customers about the breach. Customers were advised to monitor their bank and credit card statements, report suspicious transactions immediately, and replace payment cards if recommended by their financial institution.
The Meccha Chameleon malware incident highlights that even legitimate and well-known online retailers can become targets of cybercriminals. It demonstrates the importance of securing e-commerce websites against web-skimming attacks, regularly monitoring website code for unauthorized changes, and responding quickly when suspicious activity is detected. For consumers, the incident reinforces the value of using secure payment methods, enabling transaction alerts, and regularly reviewing financial statements to detect fraudulent activity as early as possible.
Current state
The game on Steam is safe now. All the hackers have been detected and banned from the game. Right now, maybe it is wise to just avoid downloading anything from the Workshop. Just enjoy the main game or whatever safe content you have access to. Don’t worry, there is no way that the developers would allow this to happen again. Even Steam doesn’t want this to happen again, so rest assured that you can play the game. For now, just make sure that it is safe on your end.
