{"rewrite":{"id":"r_3887ec9ed68ec0cb47d87cb2","clusterId":"c_51f1557bdce49ce786c81d88","slug":"meccha-cameleon-mod-maps-hit-by-malware-official-discord-server-hacked","model":"deepseek-v4-flash:free","headline":"Meccha Cameleon Discord Server Hijacked After Mod Map Malware Incident","summary":"The official Discord server for the indie game Meccha Cameleon was hijacked on July 26, just hours after developers released a security patch for malware found in user-created mod maps on Steam Workshop. Developer Lemorion reported that the server creator's account was taken over and all administrators were banned, leaving the team unable to manage the server. The incident began on July 25 when reports surfaced that some custom maps distributed via Steam Workshop contained malware capable of arbitrary code execution. The developers released version 3.1.0 that same day, which included a security patch that disabled malware execution in mod maps. However, during the verification process, one developer's backup PC became infected, leading to the Discord account compromise. The hackers then posted false claims that the game itself contained a Remote Access Tool, which Lemorion denied, stating the game is 100% virus-free. The infected PC was not a development machine, and no evidence of game file tampering was found. The server was restored by July 27, with all attacker accounts banned and a new invite link issued. Meccha Cameleon, a multiplayer hide-and-seek game where players camouflage into scenery, has sold over 15 million copies since its June 10 release.","whyItMatters":"The incident shows how a security response itself can create a new attack vector when a developer's verification machine becomes the entry point for a Discord takeover.","webCardHtml":"\u003cp\u003eCo-creator HAGANEIRO said the vulnerability in mod maps allowed unrestricted URL execution and unauthorized file generation. The security patch in version 3.1.0, released at 21:00 on July 25, blocked those capabilities. The same update added a collaboration map with \u003cem\u003eGarten of Banban\u003c/em\u003e.\u003c/p\u003e\n\u003cp\u003eThe infected backup PC was not a development machine, and logs showed no remote access or file changes to the game itself. HAGANEIRO stated that the PC has been completely reset. The hackers posted messages mimicking the fictional hacker group DedSec from Ubisoft\u0026#39;s \u003cem\u003eWatch Dogs\u003c/em\u003e series. They also claimed the game contained a Remote Access Tool, which Lemorion called \u0026#34;disinformation to cause confusion and misdirection.\u0026#34;\u003c/p\u003e\n\u003cp\u003eDiscord\u0026#39;s official X account responded to the developers\u0026#39; support request. By July 27 at approximately 7:30, the server was restored. Lemorion transferred the server\u0026#39;s highest authority to a secure account separate from the compromised one. All attacker accounts were banned, and a new invite link was issued. On X, many users praised the development team\u0026#39;s crisis management.\u003c/p\u003e\n\u003cp\u003eVersion 3.2.0, released on July 26, added 12 new emotes including \u0026#34;orz\u0026#34; and a handstand pose. The patch notes state that mod maps are now safe to use and that Steam support has confirmed the fix. \u003cem\u003eMeccha Cameleon\u003c/em\u003e is available on Steam for 790 yen, with a 15% discount to 671 yen until August 3.\u003c/p\u003e","blueskyPost":"Meccha Cameleon's Discord server was hijacked after a developer's backup PC got infected while verifying malware in mod maps. The game itself is clean, but the response chain created a new vulnerability.","twitterPost":"Meccha Cameleon devs fixed malware in mod maps, then their Discord got hacked during verification. Server restored July 27. A reminder that incident response PCs need isolation too.","threadsPost":null,"newsletterBlurb":"The indie hit Meccha Cameleon faced a double security incident: malware in Steam Workshop mod maps, followed by a Discord server hijack that occurred while developers were patching the original issue. The server has since been restored, and the developers stress the game itself remains safe.","attributionJson":"[{\"source\":\"Denfaminicogamer\",\"url\":\"https://news.denfaminicogamer.jp/news/260726b\",\"title\":\"Official Discord of 'Meccha Cameleon' Hacked; Users Advised to Temporarily Leave and Not Open Suspicious Links; Developer Says 'Game Itself Is 100% Virus-Free'\"},{\"source\":\"ASCII.jp\",\"url\":\"https://ascii.jp/elem/000/004/422/4422282/?rss\",\"title\":\"15 Million-Selling 'Meccha Chameleon' Official Discord Server Hijacked\"},{\"source\":\"Game Spark\",\"url\":\"http://www.gamespark.jp/article/2026/07/26/169751.html\",\"title\":\"Malware Found in 'MECCHA CHAMELEON' Mod Maps - Game Update Fixes Issue, But Official Discord Server Gets Hacked\"},{\"source\":\"Game Spark\",\"url\":\"http://www.gamespark.jp/article/2026/07/26/169761.html\",\"title\":\"『めっちゃカメレオン』マルウェア混入とDiscordサーバーハッキングについて、ゲームの安全性は解決済みと強調。最新アプデではorzなど新エモート12個も追加\"},{\"source\":\"Game Spark\",\"url\":\"http://www.gamespark.jp/article/2026/07/27/169772.html\",\"title\":\"『めっちゃカメレオン』公式Discordサーバーが復活！Modマップのマルウェア問題を解決しようとしたら乗っ取られてしまっていた\"},{\"source\":\"GameBusiness.jp\",\"url\":\"https://www.gamebusiness.jp/article/2026/07/28/27560.html\",\"title\":\"'Chameleon' Official Discord Server Returns! It Was Hijacked While Trying to Solve Mod Map Malware Issue\"}]","lintFlagsJson":null,"lintHits":0,"costUsd":0,"inputTokens":18202,"outputTokens":1707,"status":"published","repairAttempts":0,"nextRepairAt":null,"factsAttemptedAt":1785050027,"createdAt":"2026-07-26T07:03:58.000Z","publishedAt":"2026-07-26T07:05:45.000Z","updatedAt":"2026-07-27T22:50:26.000Z"},"cluster":{"id":"c_51f1557bdce49ce786c81d88","canonicalTitle":"『めっちゃカメレオン』Modマップにマルウェア混入報告―ゲーム側アプデで解決も、今度は公式Discordサーバーがハッキングされる事態に","representativeArticleId":"a_8edbb3189fb6e344e5e88dfe","sourceCount":4,"writtenSourceCount":4,"writeAttempts":0,"isSolo":false,"entitiesJson":"{\"anime_titles\":[],\"manga_titles\":[],\"work_titles\":[\"Mechakameleon\"],\"studios\":[],\"people\":[],\"type\":\"news\",\"domain\":\"games\",\"is_roundup\":false}","contentType":"news","status":"written","firstSeenAt":"2026-07-25T16:34:03.000Z","lastSeenAt":"2026-07-27T22:00:03.000Z","updatedAt":"2026-07-27T22:50:26.000Z"},"attribution":[{"source":"ASCII.jp","url":"https://ascii.jp/elem/000/004/422/4422282/?rss","title":"1500万本ヒットの「めっちゃカメレオン」、公式Discordが乗っ取り被害"},{"source":"Denfaminicogamer","url":"https://news.denfaminicogamer.jp/news/260726b","title":"『めっちゃカメレオン』公式Discordが乗っ取り被害に。参加中のユーザーには一時退出を推奨し、不審なリンクを開かないよう呼びかけ。開発者は「ゲーム本体にウイルスは100%ない」と説明"},{"source":"GameBusiness.jp","url":"https://www.gamebusiness.jp/article/2026/07/28/27560.html","title":"『めっちゃカメレオン』公式Discordサーバーが復活！Modマップのマルウェア問題を解決しようとしたら乗っ取られてしまっていた"},{"source":"Game Spark","url":"http://www.gamespark.jp/article/2026/07/27/169772.html","title":"『めっちゃカメレオン』公式Discordサーバーが復活！Modマップのマルウェア問題を解決しようとしたら乗っ取られてしまっていた"}],"entities":{"anime_titles":[],"manga_titles":[],"work_titles":["Mechakameleon"],"studios":[],"people":[],"type":"news","domain":"games","is_roundup":false},"keyFacts":["The official Discord server for Meccha Cameleon was hijacked on July 26 after the server creator's account was taken over and all administrators were banned.","Malware was found in user-created mod maps on Steam Workshop, prompting a security patch in version 3.1.0 on July 25 that disabled malware execution.","Developer Haganeiro's backup PC became infected during malware verification, leading to the Discord account compromise; the PC was not a development machine.","The developers denied claims that the game itself contained malware, stating the game is 100% virus-free and logs showed no tampering.","The Discord server was restored by July 27, with a new invite link issued and all attacker accounts banned."]}