Steam discussion forums are being weaponized in ClickFix attacks that pose as technical fixes but deploy XMRig cryptominers to infected devices. The scam targets gamers seeking solutions to game and system problems.
ClickFix attacks leverage Steam's forum infrastructure to distribute malware disguised as legitimate software fixes. Users seeking help with gaming or PC issues encounter posts offering remedies that actually install cryptocurrency mining malware.
XMRig, a widely-used open-source cryptominer, hijacks system resources to mine Monero without user consent. Infected devices experience degraded performance as the malware consumes CPU and GPU capacity.
The attack vector exploits user trust in community forums during moments of frustration. Victims searching for technical solutions are unlikely to scrutinize links or files offering apparent help.
Steam users should verify file sources, avoid downloading executables from forum posts, and use antivirus software to detect cryptominers. Valve has not issued an official statement on the campaign's scale or scope.
Gamers reporting suspicious posts should utilize Steam's reporting tools to flag potentially malicious content.
Threat actors are leveraging the legitimate Faronics Deploy endpoint-management platform to gain administrative control over targeted computers and install ScreenConnect remote support software.
X is investigating a surge of unsolicited password reset emails following the launch of its X Money payments service. The company believes the incidents may be connected to the new platform.
Aesto Health disclosed a data breach affecting over 9.5 million individuals. The company discovered the unauthorized access to patient information recently.
Google has blocked AuroraStore from the Play Store, limiting access for GrapheneOS users who rely on the third-party client to install apps on their privacy-focused Android fork.