ClickFix Attacks Infect Steam Gamers With XMRig Cryptominers

Steam discussion forums are currently being exploited by threat actors using ClickFix attacks to distribute XMRig cryptominers to gamers. These malicious campaigns masquerade as solutions for game or computer issues, tricking users into downloading and executing harmful software. The primary objective of these attacks is to leverage the victim's computing resources for cryptocurrency mining without their consent.

The ClickFix attacks specifically target users seeking assistance or fixes on Steam's official forums. By posting seemingly helpful replies that contain links to malicious downloads, attackers lure gamers into compromising their systems. Once executed, the malware installs the XMRig cryptominer, which then begins to mine Monero (XMR) cryptocurrency by consuming the infected computer's CPU power. This process can lead to significant performance degradation, increased electricity consumption, and potential hardware damage due to prolonged high usage.

Security researchers have identified that the XMRig cryptominer is a well-known piece of malware frequently used in such campaigns due to its efficiency in utilizing system resources for mining. The attackers aim to profit from the mined cryptocurrency, while the victims experience the negative consequences of having their systems hijacked. The use of official forums adds a layer of credibility to the phishing attempts, making them more effective against a broad range of users who trust these platforms for support and information.

While specific numbers of affected users or the exact duration of these attacks have not been publicly detailed, the ongoing nature of such threats highlights the persistent risks associated with online forums and the need for vigilance. Users are advised to exercise extreme caution when downloading any files or clicking on links shared on public forums, even if they appear to be legitimate solutions to common problems. Verifying the source and using up-to-date security software are crucial steps in preventing such infections.