Steam Users Warned Against Fake Troubleshooting Solutions

Cybercriminals are targeting Steam users who seek help for common gaming issues on discussion forums, disguising malware as troubleshooting solutions. The attackers create fake accounts and respond to user complaints with instructions that appear to solve problems.

The 'ClickFix' method relies on social engineering rather than traditional malware delivery. Victims are tricked into manually running malicious commands because the instructions seem legitimate.

Security researchers have found that the malicious PowerShell script used in the campaign disguises itself as a Windows maintenance tool called 'msf utility PC Opt.' The program displays convincing messages claiming it improves system performance by cleaning temporary files, updating drivers, and repairing Windows components.

The real attack happens through a hidden function called 'Advanced-Optimization,' which disables TLS certificate verification and downloads the XMRig mining program from an external server. It also creates a scheduled task that allows the miner to automatically restart every time Windows boots.