Steam discussions can be the best route to a quick fix or otherwise answering your most burning gaming questions. These forums can also be a hive of scum and villainy. Case in point, bad actors have been taking to the Steam forums with fake fixes that end up installing cryptominers on your gaming PC.
An innocent Steam user will post on the discussion board, sharing an issue they're having with their game. A bad actor then replies in the thread, instructing the user to run PowerShell as an administrator, and then to enter a specific command. This will be presented as a fix, but executing the command will actually download and then launch an executable for an XMRig cryptominer.
Bleeping Computer was the first to report on this style of attack happening across the Steam forums. They note that threat actors had recently targeted posts asking for help with everything from missing in-game items, to crashes.


English (US)