X (@IntCyberDigest) – Security researchers have discovered that the popular “Laser Tag Neon” custom map for MECCHA CHAMELEON was exploited to drop a malicious s.bat file, which connected to a remote server to download additional code.
The indie hit, launched June 10 by Japanese developers lemorion_1224 and Haganeiro, recently surpassed 10 million copies sold thanks to streamer coverage and word-of-mouth success.
Developer Haganeiro has released Update 3.1.0 to patch the vulnerability, while players are urged to:
⚠️ Unsubscribe from unknown custom maps
⚠️ Delete suspicious files
⚠️ Scan their systems for threats
Copycat versions of the malicious map have also reportedly appeared.
The previously reported “Laser Tag Neon” map has now been removed from the Steam Workshop, according to the researcher behind the discovery. However, the threat may not be over.
“The map (Laser Tag Neon) shown in my article has now been removed from the Steam Workshop. Unfortunately, it seems that new malicious maps have already been uploaded, so the threat is still active.”
Players are still urged to remain cautious when downloading community content:
⚠️ Avoid unknown or suspicious custom maps
⚠️ Remove unfamiliar files, especially suspicious .bat files
⚠️ Run a security scan if you downloaded affected content
🔴 CONTINUING COVERAGE: Community Watch will continue monitoring the situation as more details emerge, including developer updates, security findings, and any additional affected custom maps.
Stay tuned for updates.
Leave a Reply