WARNING: Mecha Chameleon Map Exploit
Preface: No this isn't about a hack related to steam itself. This is about the Steam game Mecha Chameleon. The game itself was not hacked. It's the content on the Steam Workshop people need to be careful with.
Why I'm sharing this and why it's important:
There was an exploit discovered with Unreal Engine itself that can/could allow (not sure if it was fixed) malicious actors to distribute malware to players through the maps uploaded to the Steam Workshop that players would then download and then play on. Someone brought attention to it and it was later discovered that many other maps had malware/malicious code tucked away into it.
The blueprints for these maps that people were making and uploading for people to play on contained code that would essentially swap out what seemed like normal code meant for assets of the game, for code that would instead run a malicious script that would pull information from a website that would install a virus to your computer.
A developer had also gotten hacked while investigating the issue. Here is the statement from the creator:
Please be safe with stuff like this, as sometimes viruses and malicious files can- once unknowingly installed- sit for a long time on your computer before being activated. :(
-Bee