Steam forum ClickFix attacks infect gamers with XMRig cryptominers
ClickFix assaults, which pose as remedies for computer and game issues but really infect devices with cryptocurrency, are abusing Steam discussion forums.
Threat actors are setting up random Steam accounts to make what seem to be helpful fixes for people's postings about games crashing, lost inventory items, and other technical concerns, according to a reader who contacted BleepingComputer about the operation.
In response to posts, the threat actors instruct other members to launch PowerShell as an administrator and execute a command to resolve the problem. Nevertheless, the code silently downloads and executes an XMRig miner software on the PC.
These kinds of attacks are referred to as ClickFix, a social engineering technique that trick victims into manually carrying out malicio...