> TritonInfoSec News
Home / Jul 27, 2026 / Story
0
#4 BleepingComputer general July 25, 2026 at 22:37 UTC

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

By Lawrence Abrams

AI Summary

Steam discussion forums are being weaponized in ClickFix-style social engineering attacks, where posts posing as game or PC troubleshooting guides direct users to execute commands that install XMRig cryptomining malware. The campaign exploits user trust in community-generated content on a platform with hundreds of millions of accounts. Endpoint detection teams should add XMRig delivery via ClickFix lures to their hunting queries, particularly for gaming-adjacent environments.

Read full article → https://www.bleepingcomputer.com/news/security/ste…

Relevance score: 67.0/100

# More from July 27

  1. 1
    MCBS Data Breach Affects 1.2 Million Individuals SecurityWeek
  2. 2
    GitHub, PyPI add time-absed defenses against supply chain attacks BleepingComputer
  3. 3
    DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts The Hacker News
  4. 5
    CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking The Hacker News
  5. 6
    Malicious sites use JavaScript to build malware in browser memory BleepingComputer
  6. 7
    ShinyHunters data leaks fuel $2,000 sextortion email scam BleepingComputer
  7. 8
    Rockwell Patches Code Execution Flaws in Arena Simulation Software SecurityWeek
  8. 9
    Big Tech accused of stonewalling European social media researchers Ars Technica Security
  9. 10
    OpenAI confirms ChatGPT is down worldwide BleepingComputer