Steam Forum Hackers Spread XMRig Cryptominers via ClickFix Attacks

Cyber attackers are using Steam's discussion forums to spread cryptominers, specifically XMRig. They create fake accounts and post PowerShell commands disguised as game fixes or troubleshooting steps.

The malicious script downloads an XMRig miner executable and launches it with system privileges. It also creates a scheduled task named 'XMRig-[computer name]' that runs the miner every time the machine starts.

This type of attack is called ClickFix, a social engineering tactic designed to get victims to run malicious commands themselves.

Steam users should be cautious when running PowerShell commands from strangers in forums and never trust verification prompts or troubleshooting steps.