Security · 2h ago
Steam Forum Scam Uses Fake Fixes to Install XMRig Crypto Miner
Attackers on Steam forums pose as support, tricking users into running PowerShell commands that disable security, download XMRig, and create a persistent scheduled task. The script adds Defender exclusions and firewall rules, then mines cryptocurrency in the background. The campaign targets gamers seeking help with technical issues.
Meridian48 take
While this targets gamers, the same ClickFix technique could easily be adapted for enterprise forums or AI-generated code snippets, making it a broader security concern.
Read the full reporting
Steam Forum ClickFix: Fake Repair Commands Lead to XMRig SYSTEM Persistence →
DEV Community
cryptominingsocial-engineering