Indie game Meccha Chameleon spreads malware via infected save files

A new cybersecurity threat is lurking in the indie gaming world. The title Meccha Chameleon, seemingly a harmless colorful platformer, has started spreading malware through its save files. Security researchers discovered that the game, available on Steam and itch.io, contains malicious code that triggers during save loading. The news has already caused a wave of concern among players, many reporting abnormal system behavior after installing the latest update.

Malware hides inside Meccha Chameleon save files

According to a report by Malwarebytes Labs, the .sav files contain an executable script that, once loaded, installs a persistent backdoor. This allows attackers to remotely take control of the infected PC, steal credentials, and even encrypt data for ransom. Experts advise against launching the game until further notice and to delete any suspicious saves. For more on how to protect yourself, a related article shows how even seemingly safe titles can hide pitfalls.

Community reacts and developer defends

The official Meccha Chameleon Twitter profile was deactivated within hours, while on Reddit and Discord fans discuss heatedly. The developer, known by the pseudonym PixelSprite Studios, released a brief statement denying responsibility, claiming the compromised code was introduced by a third-party package used for save management. However, many players remain unconvinced and demand immediate refunds. Steam has already removed the game from the store pending investigation.

How to identify and remove the threat

If you have installed Meccha Chameleon, check if the folder "%AppData%\MecchaChameleon" contains .sav files larger than 1 MB. If so, delete the entire folder and run a full antivirus scan. For a deeper look at threats in indie games, consider reading the article on OpenAI and autonomous hacking. Additionally, for general software vulnerability information, consult the Wikipedia page on malware.

Cybersecurity authorities in several countries have been alerted, but no official patch exists yet. Do not launch the game until a cleaned version is released. This incident raises questions about content moderation in digital marketplaces and the security of open app stores.

Source: Ultimi sviluppi e aggiornamenti su: Il gioco indie Meccha Chameleon diffonde malware via. Cronologia, cosa si sa finora, reazioni ufficiali.