As cited
Copy frozen at (site build).
threat intel
Steam forum ClickFix attacks infect gamers with XMRig cryptominers
Threat actors are conducting ClickFix attacks on Steam discussion forums, disguising malicious downloads as solutions for gaming and computer issues that instead deliver XMRig cryptominers to infected systems. The campaign exploits the trust users place in community forums when seeking technical support, creating a social engineering vector at scale within a popular gaming platform.
Why it matters: Gamers and technical support seekers on Steam face credential theft and system resource consumption; security teams should educate users about verifying software sources and monitor for XMRig indicators on corporate networks where employees may use gaming platforms.
- Source published
- First seen by Cybersecurity Tracker